AI coding agents now write much of the code that ships, yet whether that code is secure remains unclear. We introduce the Last Secure Code Benchmark, a comprehensive evaluation of secure code generation by coding agents. Built from 150 real vulnerabilities, its 450 tasks span seven widely used languages (Java, C, C++,...
Tian-Yi Wu, Chao Ge, Peng Chen et al.· 0 citations
This work presents RedHerring, which inserts certifiably safe decoys that divert verification effort from real vulnerabilities, and shows that its effectiveness does not depend on decoy secrecy.
Kai-Kai Zhang, Zi-Han Zhang, Yu-Chong Xie et al.· 0 citations
LLM agents convert model outputs into consequential actions, including communications, code changes, and financial transactions. Developers often trust evidence such as test results and execution logs. We identify a response path integrity gap in Bring Your Own Key configurations used by roughly 88 percent of mainstrea...
Mingyu Luo, Zihan Zhang, Zesen Liu et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.