GenAI code generators and software security

There are number of articles and reports about Copilot and similar AI code assistants as well as articles and analysis about security of code developed that way. Here is attempt to summarize some of conclusions:

• GenAI code generators speed up development and increase productivity especially among junior and medior, but also senior developers.

• They introduce even more security vulnerabilities than human developers (they learned from) so, that code needs to be carefully checked for security vulnerabilities.

Glog.AI complements these tools with its original approach and remediates security vulnerabilities introduced by those AI assistants. Glog.AI can give very precise remediation advice for security vulnerabilities in software code based on specific context.

It is not about code only but involves analysis and implementation of architectural and threat model security controls, correlation with other application security processes and tools through the entire SDLC (Software Development Lifecycle).