Metraipolis › archive › dc_db2cd63d0460

(Don't) Trust, but (Don't) Verify: Developers' Attention to Security in AI-Generated Code — arXiv:2609.21020

Source: arXiv (en)
Original: https://arxiv.org/abs/2609.21020
License (as archived): CC0-1.0
Archived: 2026-10-10T01:43:42.195Z
SHA-256 of the archived text: 1d24c0392a00aeb887788452dd25217984fad3fed90e463d877768704645ceb6
Stable URL of this page: https://metraipolis.com/documento/dc_db2cd63d0460

How to cite

(Don't) Trust, but (Don't) Verify: Developers' Attention to Security in AI-Generated Code — arXiv:2609.21020 — arXiv (en), https://arxiv.org/abs/2609.21020 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_db2cd63d0460 (Metraipolis archive dc_db2cd63d0460, sha256 1d24c0392a00aeb887788452dd25217984fad3fed90e463d877768704645ceb6)

BibTeX

@misc{dcdb2cd63d0460,
  title = {(Don't) Trust, but (Don't) Verify: Developers' Attention to Security in AI-Generated Code — arXiv:2609.21020},
  howpublished = {arXiv (en)},
  url = {https://arxiv.org/abs/2609.21020},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_db2cd63d0460; sha256 1d24c0392a00aeb887788452dd25217984fad3fed90e463d877768704645ceb6},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: arXiv (en), https://arxiv.org/abs/2609.21020. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

AI coding assistants are rapidly transforming software development, but are known to produce insecure code. Prior work has measured whether AI-assisted developers produce secure code, but less is known about how they evaluate AI-generated code: whether they can identify vulnerabilities, what cues they use, and how trust shapes their decisions. This evaluation step is foundational to secure development with AI, whether using auto-complete, chat tools, or AI agents. As a first step, we conducted a remote observational study with 100 participants isolating this evaluation stage. Participants were tasked with producing secure and functional code for four C linked-list tasks. For each, participants were able to cycle through five AI-generated suggestions varying in security and functionality, select one, and edit their choice into a final submission. Participants also completed a post-study survey about their decision-making and perception of AI-generated code's security and 23 completed a more in-depth interview.

Tema degli esploratori: fiducia digitale e crittografia (retro-catalogo arXiv: annunci del 2026-09-21 in cs.CR).
Categorie arXiv: Cryptography and Security (cs.CR) ; Software Engineering (cs.SE).
Pagina del lavoro: https://arxiv.org/abs/2609.21020 — autori e testo completo sono lì (qui omessi i nomi: nessun dato personale nel deposito).
Licenza: titolo e abstract sono metadati arXiv distribuiti in CC0 1.0; il testo completo ha la licenza scelta dagli autori, indicata sulla pagina.
Letto il 2026-10-10T01:13:42.005Z dalla pagina https://arxiv.org/catchup/cs.CR/2026-09-21?abs=True (consentita dal robots.txt di arxiv.org, con il suo crawl-delay).