3 papers
cs.CR2026
How Secure is Secure Code Generation? Adversarial Prompts Put LLM Defenses to the Test
Melissa Tessa, Iyiola E. Olatunji, Aicha War +2
Recent secure code generation methods, using vulnerability-aware fine-tuning, prefix-tuning, and prompt optimization, claim to prevent LLMs from producing insecure code. However, t…
cs.CR2025
Detection of security smells in IaC scripts through semantics-aware code and language processing
Aicha War, Adnan A. Rawass, Abdoul K. Kabore +3
Infrastructure as Code (IaC) automates the provisioning and management of IT infrastructure through scripts and tools, streamlining software deployment. Prior studies have shown th…
cs.CR2025
Security smells in infrastructure as code: a taxonomy update beyond the seven sins
Aicha War, Serge L. B. Nikiema, Jordan Samhi +2
Infrastructure as Code (IaC) has become essential for modern software management, yet security flaws in IaC scripts can have severe consequences, as exemplified by the recurring ex…