K:Vulnerability and secure code
Vulnerability and secure code
Editorial topic mappings connect related questions across sources and book chapters.
SE@PoliMi bibliography 23
- W030 — Workspace Topology as an Attack Vector in Agentic Coding Assistants
Day · 2026 - W032 — Understanding the Impact of AI Code Assistants on Security API Usage
Mousavi · 2026 - W035 — Security in the Age of AI Teammates: An Empirical Study of Agentic Pull Requests on GitHub
Siddiq · 2026 - W037 — After the Party: Growth, Governance, and Security Scanning in the OpenClaw Agent Skill Ecosystem
Xiong · 2026 - W038 — Guiding AI to Fix Its Own Flaws: An Empirical Study on LLM-Driven Secure Code Generation
Yan · 2026 - W039 — Human-Written vs. AI-Generated Code: A Large-Scale Study of Defects, Vulnerabilities, and Complexity
Cotroneo · 2025 - W040 — Security Weaknesses of Copilot-Generated Code in GitHub Projects: An Empirical Study
Fu · 2025 - W041 — Security Vulnerabilities in AI-Generated Code: A Large-Scale Analysis of Public GitHub Repositories
Schreiber · 2025 - W042 — Security Degradation in Iterative AI Code Generation: A Systematic Analysis of the Paradox
Shukla · 2025 - W045 — Is Vibe Coding Safe? Benchmarking Vulnerability of Agent-Generated Code in Real-World Tasks
Zhao · 2025 - W046 — Do Users Write More Insecure Code with AI Assistants?
Perry · 2023 - W047 — Lost at C: A User Study on the Security Implications of Large Language Model Code Assistants
Sandoval · 2023 - W048 — Asleep at the Keyboard? Assessing the Security of GitHub Copilot's Code Contributions
Pearce · 2022 - W050 — Understanding the (In)Security of Vibe-Coded Applications
Deng · 2026 - W052 — What is the Difference Between Me and You? Benchmarking the Quality Gap Between Human-Written and AI-Generated Code
Improta · 2026 - W054 — Not All Agents Are Equal: Code Quality and Post-Merge Maintenance Across Five Autonomous Coding Agents in the Wild
Kraishan · 2026 - W061 — 2025 GenAI Code Security Report
Veracode · 2025 - W062 — Vibe Security Radar
Zhao · 2026 - W067 — (Don't) Trust, but (Don't) Verify: Developers' Attention to Security in AI-Generated Code
Khalid · 2026 - W093 — Automating Low-Risk Code Review at Meta: RADAR, Risk Calibration, and Review Efficiency
Adams · 2026 - W132 — New Jobs in 140 Years of Data: Why the AI Displacement Fear Is Overstated — and What to Worry About Instead
Skoglund · 2026 - W146 — McKinsey Technology Trends Outlook 2026
Chui · 2026 - W173 — Quantifying and Mitigating Turnover-Induced Knowledge Loss: Case Studies of Chrome and a Project at Avaya
Rigby · 2016
Addy Osmani 2
- O027 — How modern browsers work
Addy Osmani · 2025-09-13 - O039 — Vibe Coding: Revolution or Reckless Abandon?
Addy Osmani · 2025-04-03
Earlier Non-Deterministic books 11
- B004 — The Fundamental Shift
Enrico Papalini · - B014 — PART II: Quality Assurance
Enrico Papalini · - B028 — Security, Compliance \& Governance
Enrico Papalini · - B035 — AI Adoption in the European Union
Enrico Papalini · - B063 — Advanced Patterns: From Frameworks to Practice
Enrico Papalini · - B093 — Agentic Patterns in Practice
Enrico Papalini · - B096 — Safety, Security, and Risk Management
Enrico Papalini · - B097 — Complete Implementation Guide
Enrico Papalini · - B100 — Ralph Loops with VS Code and GitHub Copilot
Enrico Papalini · - B107 — The Ralph Loop: Persistent Progress Through Fresh Context
Enrico Papalini · - B108 — Building a Full Local AI Loop
Enrico Papalini ·
Software Engineering Practices 10
- PAT:017 — Blast Radius Containment
- PAT:018 — PII and Secret Scrubbing
- PAT:030 — Connectors and Tools: Move Exact Work Outside the Weights
- PAT:034 — Safety and Guardrails: Verification Is Not Authorization
- PAT:037 — Dependency Sweeper: route by risk
- PAT:051 — Security-First Development
- PAT:058 — Acceptable Use Policy
- PAT:077 — Security Pipeline
- PAT:078 — Prompt Injection Scanning
- PAT:079 — Supply-Chain Risk Audit