Skip to content
Review

A comprehensive analysis of security risks and productivity impacts of AI-generated code

Jun 2026 · AI and Ethics · Vol 6 · 0 citations · 49 references
Computer Science

TL;DR

This systematic literature review examines the dual nature of AI-generated code by analyzing peer-reviewed research to quantify productivity benefits and identify associated risks, and develops a taxonomy categorizing risks into three domains.

View source

Similar papers

Review

Security Vulnerabilities in AI-Generated JWT Authentication Code for Spring Boot

Investigating the security vulnerabilities present in AI-generated JWT authentication code for Java Spring Boot Representational State Transfer Application Programming Interfaces (REST API) reinforces that AI-generated JSON Web Token (JWT) authentication code requires dedicated security review.

Hoang Long Nguyen, Mezid Hmudda, Benjamin Powley · 0 citations
Conference Jul 2026

A Comparative Analysis of Security Vulnerabilities and Defense Mechanisms in Large Language Models

Large Language Models (LLMs) are now deployed at an unprecedented scale across many critical sectors, rapidly transitioning from experimental AI tools to embedded components of production software systems. This accelerated adoption, often enabled by low-code integrations, has lowered technical barriers while simultaneo...

Md Abdul Barek, Md Bajlur Rashid, A. K. I. Riad et al. · 0 citations
Review Jul 2026

Security Vulnerability Patterns in AI-Generated Code: A Cross-Model Comparative Study

The risk is not tied to any particular model but rather to the task category, and organizations should ask not which tool to trust, but instead whether LLM-generated automation code should be deployed without review.

Shanna M. Kahn, John D. Hastings · 0 citations
Jul 2026

Cross-Cutting Security Analysis of LLM-Generated Code via Metamorphic Testing and Association Rule Mining

Findings show that insecure code generation is not merely a collection of independent defects, but a structured and prompt-conditioned phenomenon, motivating cluster-aware verification and prompt-level intervention for safer LLM-assisted programming.

Zedong Peng, Cheng-Gang Wang, Shang-Yue Zhu · 0 citations
Open access 2026

RAVE-Code: A Risk-Aware Verification Engine for AI-Generated Code Security Using Composite Risk Scoring and CWE-Conditioned Model Checking

This study presents RAVE-Code, a three-layer framework that calibrates the verification effort based on the risk associated with each detected weakness, and demonstrates how consistent two ESBMC configurations rather than agreement with an independent standard can be.

Maher Alharby, Ali Alssaiari · 0 citations
Book Open access Jul 2026

An Empirical Evaluation of Generative AI in Security Requirements Engineering and Threat Modeling

Empirical evidence is provided that generative AI can effectively support security requirements engineering when embedded within human-centered workflows and organizational governance structures, offering practical insights for adoption in regulated software development contexts.

F. Martins, Elaine Venson · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.