Ronald E. Thompson

(Don't) Trust, but (Don't) Verify: Developers'Attention to Security in AI-Generated Code

AI coding assistants are rapidly transforming software development, but are known to produce insecure code. Prior work has measured whether AI-assisted developers produce secure code, but less is known about how they evaluate AI-generated code: whether they can identify vulnerabilities, what cues they use, and how trus...