4 papers
An Insight into Security Code Review with LLMs: Capabilities, Obstacles, and Influential Factors
Jiaxin Yu, Peng Liang, Yujia Fu +4
Security code review is a time-consuming and labor-intensive process typically requiring integration with automated security defect detection tools. However, existing security anal…
Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
Yujia Fu, Peng Liang, Amjed Tahir +4
Modern code generation tools utilizing AI models like Large Language Models (LLMs) have gained increased popularity due to their ability to produce functional code. However, their…
Security Defect Detection via Code Review: A Study of the OpenStack and Qt Communities
Jiaxin Yu, Liming Fu, Peng Liang +2
Background: Despite the widespread use of automated security defect detection tools, software projects still contain many security defects that could result in serious damage. Such…
Demystifying Code Snippets in Code Reviews: A Study of the OpenStack and Qt Communities and A Practitioner Survey
Beiqi Zhang, Liming Fu, Peng Liang +2
Code review is widely known as one of the best practices for software quality assurance in software development. In a typical code review process, reviewers check the code committe…