At OWASP Global AppSec San Francisco 2024, Aruneesh presented "AI Code Generation — Benefits, Risks and Mitigation Controls." The talk laid out the productivity case for AI-driven code generation alongside its risks: security vulnerabilities, code quality issues, copyright and data exposure, model reverse engineering, bias and poisoning attacks, hallucinated dependencies, and the technical debt that comes from over-relying on the tools.
He then walked through a mitigation strategy — comprehensive code review, continuous tool monitoring, rigorous testing frameworks, clear usage guidelines, controlled rollouts, and safeguards around data management and intellectual property — so organizations can capture the upside of these tools without inheriting the downside.
Photos from this event are on the way — check back soon.