{"id":"https://openalex.org/W7160927009","doi":"https://doi.org/10.48550/arxiv.2605.10133","title":"Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements","display_name":"Usability as a Weapon: Attacking the Safety of LLM-Based Code Generation via Usability Requirements","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7160927009","doi":"https://doi.org/10.48550/arxiv.2605.10133"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.10133","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10133","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.10133","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135954295","display_name":"Yue Li","orcid":"https://orcid.org/0009-0001-2655-7697"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Yue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135937880","display_name":"Xiao Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Xiao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135923279","display_name":"Hao Wu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wu, Hao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135936766","display_name":"Yue Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056377873","display_name":"Yechao Zhang","orcid":"https://orcid.org/0000-0002-0551-1200"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yechao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123836866","display_name":"Yating Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Yating","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135972843","display_name":"Fengyuan Xu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xu, Fengyuan","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5135958968","display_name":"Sheng Zhong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhong, Sheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.23180000483989716,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.23180000483989716,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.16089999675750732,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.09849999845027924,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/usability","display_name":"Usability","score":0.9061999917030334},{"id":"https://openalex.org/keywords/usability-inspection","display_name":"Usability inspection","score":0.6916999816894531},{"id":"https://openalex.org/keywords/usability-goals","display_name":"Usability goals","score":0.6158000230789185},{"id":"https://openalex.org/keywords/web-usability","display_name":"Web usability","score":0.5942000150680542},{"id":"https://openalex.org/keywords/usability-engineering","display_name":"Usability engineering","score":0.5796999931335449},{"id":"https://openalex.org/keywords/pluralistic-walkthrough","display_name":"Pluralistic walkthrough","score":0.5074999928474426},{"id":"https://openalex.org/keywords/usability-lab","display_name":"Usability lab","score":0.4977000057697296},{"id":"https://openalex.org/keywords/cognitive-walkthrough","display_name":"Cognitive walkthrough","score":0.4564000070095062}],"concepts":[{"id":"https://openalex.org/C170130773","wikidata":"https://www.wikidata.org/wiki/Q216378","display_name":"Usability","level":2,"score":0.9061999917030334},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7207000255584717},{"id":"https://openalex.org/C23456302","wikidata":"https://www.wikidata.org/wiki/Q7901668","display_name":"Usability inspection","level":4,"score":0.6916999816894531},{"id":"https://openalex.org/C62993174","wikidata":"https://www.wikidata.org/wiki/Q2928808","display_name":"Usability goals","level":4,"score":0.6158000230789185},{"id":"https://openalex.org/C4237393","wikidata":"https://www.wikidata.org/wiki/Q1636686","display_name":"Web usability","level":3,"score":0.5942000150680542},{"id":"https://openalex.org/C100302975","wikidata":"https://www.wikidata.org/wiki/Q1642623","display_name":"Usability engineering","level":3,"score":0.5796999931335449},{"id":"https://openalex.org/C188688815","wikidata":"https://www.wikidata.org/wiki/Q7205541","display_name":"Pluralistic walkthrough","level":3,"score":0.5074999928474426},{"id":"https://openalex.org/C11324603","wikidata":"https://www.wikidata.org/wiki/Q2502322","display_name":"Usability lab","level":4,"score":0.4977000057697296},{"id":"https://openalex.org/C87105883","wikidata":"https://www.wikidata.org/wiki/Q1107002","display_name":"Cognitive walkthrough","level":4,"score":0.4564000070095062},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.4097999930381775},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.40230000019073486},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4000000059604645},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.39959999918937683},{"id":"https://openalex.org/C71151206","wikidata":"https://www.wikidata.org/wiki/Q5156686","display_name":"Component-based usability testing","level":5,"score":0.3833000063896179},{"id":"https://openalex.org/C3255780","wikidata":"https://www.wikidata.org/wiki/Q1616517","display_name":"Heuristic evaluation","level":3,"score":0.38190001249313354},{"id":"https://openalex.org/C6353995","wikidata":"https://www.wikidata.org/wiki/Q17027910","display_name":"Human-computer interaction in information security","level":5,"score":0.37070000171661377},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3666999936103821},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3140999972820282},{"id":"https://openalex.org/C2776372474","wikidata":"https://www.wikidata.org/wiki/Q508291","display_name":"Simplicity","level":2,"score":0.2752000093460083},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.25440001487731934}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.10133","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10133","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.10133","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10133","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"are":[4,26,33],"increasingly":[5],"used":[6],"for":[7],"automated":[8,92],"software":[9],"development,":[10],"making":[11],"their":[12],"ability":[13],"to":[14,65,94,161],"preserve":[15],"secure":[16],"coding":[17,63],"practices":[18],"critical.":[19],"In":[20],"practice,":[21],"however,":[22],"many":[23],"security":[24,74,127],"requirements":[25,32,52],"implicit":[27,73],"or":[28,58],"underspecified,":[29],"whereas":[30],"usability":[31,43,68,109,113],"explicit":[34,67],"and":[35,88,124,134,153,169],"high-signal.":[36],"This":[37],"asymmetry":[38],"motivates":[39],"our":[40],"investigation":[41],"of":[42,79,115],"pressure":[44],"as":[45,86],"a":[46,77,102],"practical":[47],"attack":[48,157],"surface:":[49],"realistic":[50],"usability-oriented":[51],"(e.g.,":[53,167],"new":[54],"features,":[55],"performance":[56],"constraints,":[57],"simplicity":[59],"demands)":[60],"can":[61],"cause":[62],"LLMs":[64],"satisfy":[66],"goals":[69],"while":[70],"silently":[71],"dropping":[72],"constraints":[75],"--":[76],"form":[78],"reward":[80],"hacking.":[81],"We":[82],"formalize":[83],"this":[84],"threat":[85],"UPAttack":[87,96],"propose":[89],"U-SPLOIT,":[90],"an":[91],"framework":[93],"craft":[95],"that":[97],"(i)":[98],"selects":[99],"tasks":[100],"where":[101],"model":[103],"is":[104],"initially":[105],"secure,":[106],"(ii)":[107],"synthesizes":[108],"pressures":[110],"by":[111],"identifying":[112],"rewards":[114],"insecure":[116],"alternatives":[117],"across":[118],"three":[119],"vectors":[120],"(Functionality,":[121],"Implementation,":[122],"Trade-off),":[123],"(iii)":[125],"verifies":[126],"regression":[128],"via":[129],"both":[130],"existing":[131],"test":[132],"cases":[133],"dynamically":[135],"generated":[136],"exploit":[137],"payloads.":[138],"Across":[139],"75":[140],"seed":[141],"scenarios":[142],"(25":[143],"CWEs":[144],"x":[145],"3":[146],"cases),":[147],"spanning":[148],"multiple":[149,164],"languages":[150],"(Python,":[151],"C,":[152],"JavaScript),":[154],"U-SPLOIT":[155],"achieves":[156],"success":[158],"rates":[159],"up":[160],"98.1%":[162],"on":[163],"state-of-the-art":[165],"models":[166],"GPT-5.2-chat":[168],"Gemini-3-Flash-Preview).":[170]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-13T00:00:00"}