Codexity: Secure AI-assisted Code Generation
arxiv(2024)
摘要
Despite the impressive performance of Large Language Models (LLMs) in
software development activities, recent studies show the concern of introducing
vulnerabilities into software codebase by AI programming assistants (e.g.,
Copilot, CodeWhisperer). In this work, we present Codexity, a security-focused
code generation framework integrated with five LLMs. Codexity leverages the
feedback of static analysis tools such as Infer and CppCheck to mitigate
security vulnerabilities in LLM-generated programs. Our evaluation in a
real-world benchmark with 751 automatically generated vulnerable subjects
demonstrates Codexity can prevent 60
the software developer.
更多查看译文
AI 理解论文
溯源树
样例
生成溯源树,研究论文发展脉络
Chat Paper
正在生成论文摘要