2 citations · 3 across the 8 of their papers we have counts for
8 papers
These Aren't the Reviews You're Looking For How Humans Review AI-Generated Pull Requests
Kacper Duma, Patryk Wróblewski, Jagoda Bobińska +2
We analyze code review interactions for AI-generated pull requests (PRs) on GitHub using the AIDev dataset and compare them to human-authored PRs within the same repositories. We f…
Linux Kernel Recency Matters, CVE Severity Doesn't, and History Fades
Piotr Przymus, Witold Weiner, Krzysztof Rykaczewski +1
In 2024, the Linux kernel became its own Common Vulnerabilities and Exposures (CVE) Numbering Authority (CNA), formalizing how kernel vulnerabilities are identified and tracked. We…
Adversarial Bug Reports as a Security Risk in Language Model-Based Automated Program Repair
Piotr Przymus, Andreas Happe, Jürgen Cito
Large Language Model (LLM) - based Automated Program Repair (APR) systems are increasingly integrated into modern software development workflows, offering automated patches in resp…
Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack
Piotr Przymus, Thomas Durieux
The digital economy runs on Open Source Software (OSS), with an estimated 90\% of modern applications containing open-source components. While this widespread adoption has revoluti…
How I Learned to Stop Worrying and Love ChatGPT
Piotr Przymus, Mikołaj Fejzer, Jakub Narębski +1
In the dynamic landscape of software engineering, the emergence of ChatGPT-generated code signifies a distinctive and evolving paradigm in development practices. We delve into the…
HaPy-Bug -- Human Annotated Python Bug Resolution Dataset
Piotr Przymus, Mikołaj Fejzer, Jakub Narębski +5
We present HaPy-Bug, a curated dataset of 793 Python source code commits associated with bug fixes, with each line of code annotated by three domain experts. The annotations offer…
Out of Sight, Still at Risk: The Lifecycle of Transitive Vulnerabilities in Maven
Piotr Przymus, Mikołaj Fejzer, Jakub Narębski +2
The modern software development landscape heavily relies on transitive dependencies. They enable seamless integration of third-party libraries. However, they also introduce securit…
The Secret Life of CVEs
Piotr Przymus, Mikołaj Fejzer, Jakub Narębski +1
The Common Vulnerabilities and Exposures (CVEs) system is a reference method for documenting publicly known information security weaknesses and exposures. This paper presents a stu…