Application Security in the Age of Vibe Coding - Ciaran Conliffe скачать в хорошем качестве

Application Security in the Age of Vibe Coding - Ciaran Conliffe

Like it or not, the way software is being created is changing. Some developers are using AI assistants to help build their code, while others are turning over the entire development process to autonomous AI agents. The end result of this means less and less of the code our developers deliver is being created by them. But what does this mean for Application Security? For years, secure development practices have been a core part of delivering secure software. But is that possible when it’s not humans doing the developing? A study carried out in February 2025 by GitClear indicates that AI-assisted coding has led to a surge in duplicated code blocks, a decrease in delivery stability, and a general decline in code quality. With all this happening, should we abandon the dream of secure development and give up on working to have less security-related defects in our code? In this talk, I will argue that the answer is no – and in fact, that we need the principles of secure software development more than ever. I’ll look at the broad range of different AI-assisted software development methodologies and discuss what existing security controls still apply to them. I’ll also look at new controls we need to put in place to secure our software in this new world. You’ll learn what actions you can take to make sure that your developers can continue to produce secure code while still taking advantage of the productivity increase that AI can give us. And you'll see that while there’s no putting the AI genie back in the bottle, this new way of creating software is nothing to be afraid of. #bsidesbelfast25 #securitybsides #bsidesbelfast #bsides