Publication in conference proceedings Q4
Are we there yet?: On security vulnerabilities produced by open source generative AI models and Its Implications for security education
Maria Camila Santos Galeano (Galeano, M. C.); Tiago Espinha Gasiba (Gasiba, T.); Sathwik Amburi (Amburi, S.); Maria Pinto-Albuquerque (Pinto-Albuquerque, M.);
6th International Computer Programming Education Conference (ICPEC 2025)
Year (definitive publication)
2025
Language
English
Country
Germany
More Information
--
Web of Science®

Times Cited: 0

(Last checked: 2026-06-21 18:44)

View record in Web of Science®

Scopus

This publication is not indexed in Scopus

Google Scholar

Times Cited: 0

(Last checked: 2026-06-15 16:25)

View record in Google Scholar

This publication is not indexed in Overton

Abstract
With the increasing integration of large language models (LLMs) into software development and programming education, concerns have emerged about the security of AI-generated code. This study investigates the security of three open source code generation models. Codestral, DeepSeek R1, and LLaMA 3.3 70B using structured prompts in Python, C, and Java. Some prompts were designed to explicitly trigger known vulnerability patterns, such as unsanitized input handling or unsafe memory operations, in order to assess how each model responds to security-sensitive tasks. The findings reveal recurring issues, including command execution vulnerabilities, insecure memory handling, and insufficient input validation. In response, we propose a set of recommendations for integrating secure prompt design and code auditing practices into developer training. These guidelines aim to help future developers generate safer code and better identify flaws in GenAIgenerated output. This work offers an initial analysis of the limitations of GenAI-assisted code generation and provides actionable strategies to support the more secure and responsible use of these tools in professional and educational contexts.
Acknowledgements
--
Keywords
Generative AI,Code security,Programming education,Prompt engineering,Secure coding,Statistc analysis
  • Mathematics - Natural Sciences
  • Social and Economic Geography - Social Sciences
Funding Records
Funding Reference Funding Entity
UIDP/04466/2020 Fundação para a Ciência e a Tecnologia
Related Projects