{"id":"https://openalex.org/W7125579407","doi":"https://doi.org/10.1016/j.cose.2026.104842","title":"Insecure by design? A human-centric security perspective on AI-assisted software development","display_name":"Insecure by design? A human-centric security perspective on AI-assisted software development","publication_year":2026,"publication_date":"2026-01-24","ids":{"openalex":"https://openalex.org/W7125579407","doi":"https://doi.org/10.1016/j.cose.2026.104842"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2026.104842","doi":"https://doi.org/10.1016/j.cose.2026.104842","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104842","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.cose.2026.104842","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072285945","display_name":"Magdalena Glas","orcid":"https://orcid.org/0000-0003-0239-7526","observed_orcids":["https://orcid.org/0000-0003-0239-7526"]},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Magdalena Glas","raw_affiliation_strings":["University of Regensburg, Universit\u00e4tsstr. 31, Regensburg, 93047, Germany"],"raw_orcid":"https://orcid.org/0000-0003-0239-7526","affiliations":[{"raw_affiliation_string":"University of Regensburg, Universit\u00e4tsstr. 31, Regensburg, 93047, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123739278","display_name":"Christoph Nirschl","orcid":"https://orcid.org/0009-0002-1439-3354","observed_orcids":["https://orcid.org/0009-0002-1439-3354"]},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Christoph Nirschl","raw_affiliation_strings":["University of Regensburg, Universit\u00e4tsstr. 31, Regensburg, 93047, Germany"],"raw_orcid":"https://orcid.org/0009-0002-1439-3354","affiliations":[{"raw_affiliation_string":"University of Regensburg, Universit\u00e4tsstr. 31, Regensburg, 93047, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123748821","display_name":"Bar Lanyado","orcid":"https://orcid.org/0009-0006-5376-2625","observed_orcids":["https://orcid.org/0009-0006-5376-2625"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bar Lanyado","raw_affiliation_strings":["Lasso, Beit Shamai St 10, Tel Aviv, 6701838, Israel"],"raw_orcid":"https://orcid.org/0009-0006-5376-2625","affiliations":[{"raw_affiliation_string":"Lasso, Beit Shamai St 10, Tel Aviv, 6701838, Israel","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011187560","display_name":"Johan van Niekerk","orcid":"https://orcid.org/0000-0003-1739-4563","observed_orcids":["https://orcid.org/0000-0003-1739-4563"]},"institutions":[{"id":"https://openalex.org/I4405261254","display_name":"Noroff University College","ror":"https://ror.org/050r0fy88","country_code":"NO","type":"education","lineage":["https://openalex.org/I4405261254"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Johan van Niekerk","raw_affiliation_strings":["Noroff University College, Tordenskjolds gate 9, Kristiansand, 4612, Norway"],"raw_orcid":"https://orcid.org/0000-0003-1739-4563","affiliations":[{"raw_affiliation_string":"Noroff University College, Tordenskjolds gate 9, Kristiansand, 4612, Norway","institution_ids":["https://openalex.org/I4405261254"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5072285945"],"corresponding_institution_ids":["https://openalex.org/I60668342"],"apc_list":{"value":3100,"currency":"USD","value_usd":3100},"apc_paid":{"value":3100,"currency":"USD","value_usd":3100},"fwci":25.6662,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.99283849,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"164","issue":null,"first_page":"104842","last_page":"104842"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.42989999055862427,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.42989999055862427,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.16930000483989716,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.14810000360012054,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/generative-ai","display_name":"generative AI","score":0.8669999837875366},{"id":"https://openalex.org/keywords/ai-assisted-software-engineering","display_name":"AI-assisted software development","score":0.9430000185966492},{"id":"https://openalex.org/keywords/human-centric-security","display_name":"human-centric security","score":0.7409999966621399},{"id":"https://openalex.org/keywords/security-risks","display_name":"security risks","score":0.5659999847412109},{"id":"https://openalex.org/keywords/training-data-quality","display_name":"training data quality","score":0.6660000085830688},{"id":"https://openalex.org/keywords/security-risk-mitigation","display_name":"security risk mitigation","score":0.7519999742507935},{"id":"https://openalex.org/keywords/artificial-intelligence-in-education","display_name":"artificial intelligence in education","score":0.42500001192092896}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6963000297546387},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.571399986743927},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.5602999925613403},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.5047000050544739},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49050000309944153},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.48989999294281006},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4733000099658966},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4657000005245209},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.4311999976634979},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.430400013923645},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.399399995803833},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3878999948501587},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.3734000027179718},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.35989999771118164},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.34540000557899475},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3366999924182892},{"id":"https://openalex.org/C13159133","wikidata":"https://www.wikidata.org/wiki/Q365674","display_name":"Security engineering","level":5,"score":0.3077000081539154},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3043999969959259},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.29179999232292175},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C117447612","wikidata":"https://www.wikidata.org/wiki/Q1412670","display_name":"Software quality","level":4,"score":0.2759000062942505},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.2759000062942505},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.25519999861717224},{"id":"https://openalex.org/C180152950","wikidata":"https://www.wikidata.org/wiki/Q2904257","display_name":"Software development process","level":4,"score":0.25429999828338623}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1016/j.cose.2026.104842","doi":"https://doi.org/10.1016/j.cose.2026.104842","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104842","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},{"id":"pmh:oai:epub.uni-regensburg.de:78556","doi":null,"is_oa":true,"landing_page_url":"http://orcid.org/0000-0003-0239-7526>,","pdf_url":"https://epub.uni-regensburg.de/78556/1/1-s2.0-S0167404826000180-main.pdf","source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:doi:10.5283/epub.78556","doi":null,"is_oa":true,"landing_page_url":"https://epub.uni-regensburg.de/78556/","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Text"},{"id":"doi:10.5283/epub.78556","doi":"https://doi.org/10.5283/epub.78556","is_oa":true,"landing_page_url":"https://doi.org/10.5283/epub.78556","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.1016/j.cose.2026.104842","doi":"https://doi.org/10.1016/j.cose.2026.104842","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.cose.2026.104842","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7125579407.pdf","grobid_xml":"https://content.openalex.org/works/W7125579407.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W3030163527","https://openalex.org/W3198659451","https://openalex.org/W4320854981","https://openalex.org/W4360836968","https://openalex.org/W4362659486","https://openalex.org/W4367672983","https://openalex.org/W4385262268","https://openalex.org/W4389599215","https://openalex.org/W4396820575","https://openalex.org/W4400582849","https://openalex.org/W4400680805","https://openalex.org/W4401687261","https://openalex.org/W4402713932","https://openalex.org/W4406602186","https://openalex.org/W4407392582","https://openalex.org/W4408214684","https://openalex.org/W4414485088","https://openalex.org/W7131867455","https://openalex.org/W7155906632"],"related_works":["https://openalex.org/W4409215202","https://openalex.org/W4406069196","https://openalex.org/W4410357414","https://openalex.org/W7160495062","https://openalex.org/W7166405827","https://openalex.org/W4411460350","https://openalex.org/W7164178018","https://openalex.org/W7163137042","https://openalex.org/W7154570766","https://openalex.org/W7167735079"],"abstract_inverted_index":{"Generative":[0],"artificial":[1],"intelligence":[2],"(AI)":[3],"tools":[4,52],"are":[5,100],"increasingly":[6],"used":[7],"in":[8,65,134],"software":[9,15,135],"development,":[10],"improving":[11],"the":[12,57,66,69,75,129,140],"efficiency":[13],"of":[14,44,56,68,131],"developers.":[16],"However,":[17],"this":[18,116],"adoption":[19],"introduces":[20],"notable":[21],"security":[22,67,77,142],"challenges.":[23],"AI/generated":[24],"code":[25,43],"is":[26,33],"not":[27,93],"secure":[28],"by":[29],"default,":[30],"as":[31],"it":[32],"often":[34],"based":[35],"on":[36],"large-scale":[37],"training":[38],"data":[39],"that":[40],"includes":[41],"open-source":[42],"varying":[45],"quality":[46],"and":[47,83,124],"trustworthiness.":[48],"Developers":[49],"using":[50],"these":[51,90],"may":[53,61],"be":[54],"unaware":[55],"associated":[58,79,141],"risks":[59,78,91],"or":[60],"place":[62],"excessive":[63],"trust":[64],"output.":[70],"This":[71],"briefing":[72],"paper":[73],"outlines":[74],"key":[76],"with":[80,108],"generative":[81,97,132],"AI":[82,98,133],"offers":[84],"human-centered":[85],"strategies":[86],"for":[87,121],"mitigation.":[88],"Since":[89],"arise":[92],"only":[94],"from":[95,104],"how":[96,105],"models":[99],"built":[101],"but":[102],"also":[103],"humans":[106],"interact":[107],"them,":[109],"we":[110,118],"adopt":[111],"a":[112],"human-centric":[113],"perspective.":[114],"To":[115],"end,":[117],"provide":[119],"recommendations":[120],"individuals,":[122],"organizations,":[123],"educators":[125],"to":[126],"help":[127],"harness":[128],"potential":[130],"development":[136],"while":[137],"effectively":[138],"managing":[139],"risks.":[143]},"counts_by_year":[{"year":2026,"cited_by_count":5}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-01-25T00:00:00"}