{"id":"https://openalex.org/W4388483595","doi":"https://doi.org/10.1109/esem56168.2023.10304857","title":"Evaluating the Impact of ChatGPT on Exercises of a Software Security Course","display_name":"Evaluating the Impact of ChatGPT on Exercises of a Software Security Course","publication_year":2023,"publication_date":"2023-10-26","ids":{"openalex":"https://openalex.org/W4388483595","doi":"https://doi.org/10.1109/esem56168.2023.10304857"},"language":"en","primary_location":{"id":"doi:10.1109/esem56168.2023.10304857","is_oa":false,"landing_page_url":"https://doi.org/10.1109/esem56168.2023.10304857","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067021027","display_name":"Jingyue Li","orcid":"https://orcid.org/0000-0002-7958-391X"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Jingyue Li","raw_affiliation_strings":["Norwegian Univ. of Science and Technology (NTNU),Dept. of Computer Science,Trondheim,Norway","Dept. of Computer Science, Norwegian Univ. of Science and Technology (NTNU), Trondheim, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Norwegian Univ. of Science and Technology (NTNU),Dept. of Computer Science,Trondheim,Norway","institution_ids":["https://openalex.org/I204778367"]},{"raw_affiliation_string":"Dept. of Computer Science, Norwegian Univ. of Science and Technology (NTNU), Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028218902","display_name":"Per H\u00e5kon Meland","orcid":"https://orcid.org/0000-0002-5509-0184"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Per H\u00e5kon Meland","raw_affiliation_strings":["NTNU,Dept. of Computer Science,Trondheim,Norway","Dept. of Computer Science, NTNU, Trondheim, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTNU,Dept. of Computer Science,Trondheim,Norway","institution_ids":[]},{"raw_affiliation_string":"Dept. of Computer Science, NTNU, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060102513","display_name":"Jakob Svennevik Notland","orcid":"https://orcid.org/0000-0001-7406-7038"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Jakob Svennevik Notland","raw_affiliation_strings":["NTNU,Dept. of Computer Science,Trondheim,Norway","Dept. of Computer Science, NTNU, Trondheim, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTNU,Dept. of Computer Science,Trondheim,Norway","institution_ids":[]},{"raw_affiliation_string":"Dept. of Computer Science, NTNU, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012380648","display_name":"Andr\u00e9 Storhaug","orcid":"https://orcid.org/0000-0002-5321-7196"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Andr\u00e9 Storhaug","raw_affiliation_strings":["NTNU,Dept. of Computer Science,Trondheim,Norway","Dept. of Computer Science, NTNU, Trondheim, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTNU,Dept. of Computer Science,Trondheim,Norway","institution_ids":[]},{"raw_affiliation_string":"Dept. of Computer Science, NTNU, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5092912244","display_name":"Jostein Hjortland Tysse","orcid":null},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Jostein Hjortland Tysse","raw_affiliation_strings":["NTNU,Dept. of Computer Science,Trondheim,Norway","Dept. of Computer Science, NTNU, Trondheim, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTNU,Dept. of Computer Science,Trondheim,Norway","institution_ids":[]},{"raw_affiliation_string":"Dept. of Computer Science, NTNU, Trondheim, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9749000072479248,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.972599983215332,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7501466870307922},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.7132219672203064},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7097043395042419},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.691548228263855},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.6478569507598877},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.6132385730743408},{"id":"https://openalex.org/keywords/application-security","display_name":"Application security","score":0.5220389366149902},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.518075704574585},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5089783668518066},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.45432227849960327},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.4169308841228485},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.40671631693840027},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.38756853342056274},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3720550537109375},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.20316556096076965},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13935425877571106}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7501466870307922},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.7132219672203064},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7097043395042419},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.691548228263855},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.6478569507598877},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.6132385730743408},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.5220389366149902},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.518075704574585},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5089783668518066},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.45432227849960327},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.4169308841228485},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.40671631693840027},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.38756853342056274},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3720550537109375},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.20316556096076965},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13935425877571106},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/esem56168.2023.10304857","is_oa":false,"landing_page_url":"https://doi.org/10.1109/esem56168.2023.10304857","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 ACM/IEEE International Symposium on Empirical Software Engineering and Measurement (ESEM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3499280066","display_name":null,"funder_award_id":"101083594","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2964144088","https://openalex.org/W3177813494","https://openalex.org/W4210924384","https://openalex.org/W4211263275","https://openalex.org/W4281721284","https://openalex.org/W4388858772"],"related_works":["https://openalex.org/W2392503306","https://openalex.org/W2560421591","https://openalex.org/W3041665175","https://openalex.org/W125279808","https://openalex.org/W4400965451","https://openalex.org/W2589805430","https://openalex.org/W2809528855","https://openalex.org/W4313400739","https://openalex.org/W2152250926","https://openalex.org/W4388483595"],"abstract_inverted_index":{"Along":[0],"with":[1],"the":[2,72,76,83,91,96,135,141,158,172],"development":[3],"of":[4,44,75,121,134,187],"large":[5],"language":[6],"models":[7,30,35],"(LLMs),":[8],"e.g.,":[9],"ChatGPT,":[10,70],"many":[11],"existing":[12],"approaches":[13],"and":[14,32,40,57,101,108,152,168,180],"tools":[15],"for":[16,171],"software":[17,37,46],"security":[18,38,47],"are":[19,31],"changing.":[20],"It":[21],"is,":[22],"therefore,":[23],"essential":[24],"to":[25,55,80,89,99,123,178,184],"understand":[26],"how":[27,33,82],"security-aware":[28],"these":[29,34],"impact":[36],"practices":[39],"education.":[41],"In":[42,110],"exercises":[43],"a":[45,63,118,145],"course":[48],"at":[49],"our":[50],"university,":[51],"we":[52,60,78,112,138,160,175],"ask":[53],"students":[54,84,177],"identify":[56,132],"fix":[58,179],"vulnerabilities":[59,137,156,174],"insert":[61],"in":[62,105,140,144],"web":[64,142],"application":[65,143],"using":[66],"state-of-the-art":[67],"tools.":[68],"After":[69],"especially":[71],"GPT-4":[73],"version":[74],"model,":[77],"want":[79,176],"know":[81],"can":[85,116,131,181],"possibly":[86],"use":[87],"ChatGPT":[88,100,115,130,162],"complete":[90],"exercise":[92],"tasks.":[93],"We":[94],"input":[95],"vulnerable":[97],"code":[98],"measure":[102],"its":[103,125],"accuracy":[104],"vulnerability":[106],"identification":[107],"fixing.":[109],"addition,":[111],"investigated":[113],"whether":[114],"provide":[117],"proper":[119],"source":[120],"information":[122],"support":[124],"outputs.":[126],"Results":[127],"show":[128],"that":[129],"20":[133],"28":[136],"inserted":[139],"white-box":[146],"setting,":[147],"reported":[148],"three":[149],"false":[150],"positives,":[151],"found":[153],"four":[154],"extra":[155],"beyond":[157],"ones":[159],"inserted.":[161],"makes":[163],"nine":[164],"satisfactory":[165],"penetration":[166],"testing":[167],"fixing":[169],"recommendations":[170],"ten":[173],"often":[182],"point":[183],"related":[185],"sources":[186],"information.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}