Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions

📖 Description

Asleep at the Keyboard? Assessing the Security of GitHub Copilot?s Code Contributions Hammond Pearce Department of ECE New York University Brooklyn, NY , USA [email removed]Baleegh Ahmad Department of ECE New York University Brooklyn, NY , USA [email removed]Benjamin Tan Department of ESE University of Calgary Calgary, Alberta, CA [email removed]Brendan Dolan-Gavitt Department of CSE New York University Brooklyn, NY , USA [email removed]Ramesh Karri Department of ECE New York University Brooklyn, NY , USA [email removed] Abstract ?There is burgeoning interest in designing AI-based systems to assist humans in designing computing systems, including tools that automatically generate computer code. The most notable of these comes in the form of the ?rst self-described ?AI pair programmer?, GitHub Copilot, which is a language model trained over open-source GitHub code. However, code often contains bugs?and so, given the vast quantity of unvetted code that Copilot has pro...

📊 Game Impacts

💭 Reactions

🔗 Sources

• [1] https://arxiv.org/abs/2108.09293