�@��New York University�ƃJ�i�_��University of Calgary�̌��`�[��\��_��uAsleep at the Keyboard�H Assessing the Security of GitHub Copilot�fs Code Contributions�v�́A�R�[�h��uGitHub Copilot�v�ɂ��āA��R�[�h��Z�L��e�B�ʂłǂꂭ�炢��S��𒲍��񍐂��B��ʁA��Ő��R�[�h�̖�40��ɐƎ㐫��ꂽ�B

Copilot�̎g�p��

�@�\�t�g�E�F�A�J��҂́A�R�[�h��v��ɍ쐬��邱�Ƃ��߂��邽�߁A��Y��コ��V��c�[��Z�p��Ƀt�H��[��Ă��Ȃ��΂Ȃ�Ȃ��B��̕��̍ł��V��Z�p��1�́A��Ƃ��Ǝ��R��ꏈ��iNLP�j�p�ɐ݌v��ꂽ��K�͂ȃ��f��c��ȗʂ̃R�[�h�Ŋw�K��A�v��O��}�[��R�[�h��ۂɎx��A�R�[�h�̎��f��ł��B

�@2021�N6��AGitHub�̓R��g��֐��A�h�L��g��Ȃǂ��當��ǂݎ��R�[�h��uCopilot�v��[�X��BCopilot�́A��͂��ƂɃv��O��}�[��ł��낤�R�[�h��\��񎦂��Ă��A��ƂɃ��[�U�[��Ċ��A�y�A�v��O��~��O��B

�@Copilot�́A��͂��v��O��OpenAI Codex��GPT-3��ՃV�X�e��Ƃ��Ă��AGitHub�Ō��J��Ă��c��ȗʂ̃I�[�v��\�[�X�R�[�h��w�K��Ă��B

�@��ŁA�w�K��ɗp��\�[�X�R�[�h�ɂ͖��؂Ȃ��߃o�O��܂܂��̂��A�K�R�I�ɐ��R�[�h�ɂ��Ǝ�Ȃ��̂��܂܂��B��ł��̌��ł́ACopilot��R�[�h��ǂ�قǈ��S�ł��邩�𒲍��B

�@��ł́AMITRE��댯�x�̍��Ǝ㐫�^�C�v��L��O��u2021 CWE Top 25 Most Dangerous Software Weaknesses�v�iCWE Top 25�j�ɂ��悤�ȁA��X�N�̍��Z�L��e�B�̐Ǝ㐫�Ɋ֘A��V�i��I��Copilot�ɃR�[�h�𐶐��Ă��B

�@�]��ɂ́A�Ǝ㐫��o��CodeQL�Ǝ蓮��p��A�Ԃ��ꂽ��Ă��CWE�ɑ΂��ĐƎ�ł��邩�ǂ��𒲍��A�R�[�h��̃p�t�H�[�}��X��؂��B

Copilot�̕]��@

�@��v��89��ނ̃V�i��I��쐬��A1689�̃v��O��Copilot�Ɏ��s��ʁA40.73��ɐƎ㐫��邱�Ƃ��B��ʂł́AC��̃V�i��I��25��A513�̃v��O��A258�i50.29��j��Ǝ�ł��BPython�̃V�i��I��29��ŁA��v571�̃v��O��A219�i38.35��j��Ǝ�ł��B

Source and Image Credits: Hammond Pearce, Baleegh Ahmad, Benjamin Tan, Brendan Dolan-Gavitt, and Ramesh Karri. Asleep at the Keyboard? Assessing the Security of GitHub Copilot�fs Code Contributions

�֘A�L��

$GitHub�AAI�v��O��~��O�@�\�uCopilot�v�̈�ʒ񋟊J�n�@��z10�h��$ GitHub�AAI�v��O��~��O�@�\�uCopilot�v�̈�ʒ񋟊J�n�@��z10�h��
Microsoft�P��GitHub�́AAI�v��O��~��O�@�\�uGitHub Copilot�v�̈�ʒ񋟂��J�n��B��z10�h��邢�͔N�z100�h��̃T�u�X�N��B�w��ƈꕔ�̃��e�i�[�͈��ŗ��p�ł��B
AWS�A�v��O��~��O��@�B�w�K�Ŏx��uAmazon CodeWhisperer�v�v��r��[��J�@�R��g��ƃR�[�h��
AWS��A�@�B�w�K��p��ăv��O��~��O��x��uAmazon CodeWhisperer�v��v��r��[��J��A�I�[�v��\�[�X��|�W�g��Ȃǂ��琔�\��s�̃R�[�h��ɂ��@�B�w�K�ɂ��A�v��O��}�[��n�߂��R�[�h�̑��Ă��Ă��T�[�r�X�Ƃ��B
��͂��v��O��uOpenAI Codex�v��API��J�@�uGitHub Copilot�v�̃G��W��
��AI��@�ւ�OpenAI��A��R��ꂩ��\�[�X�R�[�h��AI�V�X�e��uCodex�v�̃v��C�x�[�g��API�̒񋟂��n�߂��BPython��JavaScript�ARuby�Ȃ�10�ȏ�̌��ɑΉ��Ă��B
�w��̔M��p�X��[�h�𓐂ލU��@��͌�̃L�[�{�[�h��牟��ꏊ��@6��Ȃ猟�o��x100��
�X�R�b�g��h��University of Glasgow�ƃT�E�W�A��r�A��Taif University�ɂ�錤��`�[��́A�L�[�{�[�h��l�̎w��̔M��o��A�M�摜��͂��ă��[�U�[�̓��͂𐄒�A�p�X��[�h�Ȃǂ��擾��[�w�w�K�V�X�e��Ă��񍐂𔭕\��B
�J��Ɂu��݂��Ȃ��́v��T�C�o�[�U��@��ꂽ�ꏊ��d�g�𑗐M�@��99��
�p�I�b�N�X�t�H�[�h��w�̌��`�[��́A�d�g��g��A�摜�F��V�X�e��܂��đ��݂��Ȃ��̂��@��Ă��񍐂𔭕\��B�Ⴆ�ΐ^��ł��J��t��[��ɕ��𕂂��яオ�点�邱�ƂȂǂ��ł��B