{"id":"https://openalex.org/W7164161598","doi":"https://doi.org/10.48550/arxiv.2606.10945","title":"Context-Based Adversarial Attacks on AI Code Generators: Vulnerability Analysis and Implications","display_name":"Context-Based Adversarial Attacks on AI Code Generators: Vulnerability Analysis and Implications","publication_year":2026,"publication_date":"2026-06-09","ids":{"openalex":"https://openalex.org/W7164161598","doi":"https://doi.org/10.48550/arxiv.2606.10945"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.10945","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10945","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.10945","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138287686","display_name":"Walther A. Del Orbe","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Del Orbe, Walther A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138292436","display_name":"John D. Hastings","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hastings, John D.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138350735","display_name":"Varghese Vaidyan","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vaidyan, Varghese","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.746999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.746999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.11479999870061874,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.026599999517202377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8431000113487244},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7123000025749207},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.6676999926567078},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5716999769210815},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.5684000253677368},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5232999920845032},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.5116999745368958},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5019999742507935},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4560999870300293}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8431000113487244},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7123000025749207},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7005000114440918},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.6676999926567078},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5964999794960022},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5716999769210815},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.5684000253677368},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5232999920845032},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.5116999745368958},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5019999742507935},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4560999870300293},{"id":"https://openalex.org/C61272859","wikidata":"https://www.wikidata.org/wiki/Q7834031","display_name":"Transferability","level":3,"score":0.41440001130104065},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4068000018596649},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.3610999882221222},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.3495999872684479},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.32359999418258667},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.3109000027179718},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30059999227523804},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.29899999499320984},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.28290000557899475},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.27889999747276306},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.27880001068115234},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.10945","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10945","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.10945","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.10945","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"AI-powered":[0],"code":[1],"generation":[2,66],"systems":[3],"have":[4],"transformed":[5],"software":[6],"development":[7,115],"but":[8],"introduce":[9],"critical":[10],"inference-time":[11],"security":[12],"vulnerabilities.":[13],"This":[14],"research":[15],"presents":[16],"a":[17],"systematic":[18],"investigation":[19],"of":[20],"context-based":[21],"adversarial":[22,62],"attacks,":[23],"where":[24],"strategically":[25],"crafted":[26],"contextual":[27],"inputs,":[28],"including":[29],"comments,":[30],"documentation,":[31],"variable":[32],"names,":[33],"bias":[34],"large":[35],"language":[36],"models":[37],"toward":[38],"generating":[39],"exploitable":[40],"code.":[41],"Through":[42],"2,800":[43],"controlled":[44],"experiments":[45],"across":[46],"CodeT5+,":[47],"CodeLlama,":[48],"GPT-3.5-Turbo,":[49],"and":[50,56,105],"GPT-4,":[51],"we":[52],"quantify":[53],"attack":[54],"effectiveness":[55],"defense":[57,95],"mechanisms.":[58],"Results":[59],"demonstrate":[60],"that":[61],"conditions":[63],"increase":[64],"vulnerability":[65],"10.7x":[67],"(from":[68],"3.5%":[69],"to":[70],"37.4%),":[71],"with":[72,101],"direct":[73],"instruction":[74],"attacks":[75],"achieving":[76],"100%":[77],"success":[78],"on":[79],"GPT-3.5-Turbo.":[80],"Cross-model":[81],"transferability":[82],"reaches":[83],"60-100%,":[84],"indicating":[85],"systemic":[86],"architectural":[87],"vulnerabilities":[88],"rather":[89],"than":[90],"model-specific":[91],"flaws.":[92],"Our":[93],"dual-layer":[94],"framework":[96],"achieves":[97],"89.1%":[98],"detection":[99],"rate":[100],"0.3%":[102],"false":[103],"positives":[104],"520ms":[106],"latency,":[107],"demonstrating":[108],"practical":[109],"feasibility":[110],"for":[111],"real-time":[112],"deployment":[113],"in":[114],"environments.":[116]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-11T00:00:00"}