AI is reshaping software development as we know it. With just a few clicks, anyone with an idea can now generate advanced applications. However, the rise of “vibe coding” also introduces new security risks. Code suggestions from language models can result in vulnerabilities and data leaks, particularly in small and medium-sized enterprises with limited resources.
The project “Understanding and Supporting Secure AI Tools in Software Development Teams” aims to develop guidelines and tools that enable developers to use AI in software engineering safely and responsibly. By doing so, it directly strengthens cybersecurity and ensures that AI supports quality as well as productivity.
The project is led by Louise Barkhuus, Adam Alami, Elda Paja, Oksana Kulyk, Peter Mayer, and Eszter Vigh. If you have any questions about the study, please contact: esvi@itu.dk.
The IT University of Copenhagen (ITU) is a Danish university that teaches and conducts research in information technology. ITU is registered in the Danish Business Registry, CVR no. 29057753.
ITU may be contacted by phone no. +45 7218 5000, by e-mail at itu@itu.dk or at the address Rued Langgaards Vej 7, 2300 København S, Denmark.
You can also contact our Data Protection Officer (DPO) via dpo@itu.dk, if you have any questions regarding our processing of your personal data.
ITU processes your personal data for the following reason:
The NAST project is interested in understanding and supporting secure AI tools in software development teams. We aim to develop guidelines and tools that enable developers to use AI in software engineering safely and responsibly based off of the data we collect.
The legal basis for our processing of your personal data is pursuant to the following: performance of research carried out in the public interest or in the exercise of official authority (GDPR Art. 6, section 1, litra e).
We store your personal data for four years, which includes the duration of the grant period and time to write up research papers. The data collected during this research study will be used in future research papers in the form of aggregated anonymized data and anonymized quotes.
You have the right to request access to, rectification or erasure of personal data, which we process about you. You may also request ITU to restrict our processing of your personal data, just as you may object to our processing and request us to transfer your personal information to others.
However, it is not certain whether we may or are able to comply with your request, e.g. due to a legal requirement. We therefore recommend that your initial inquiries are communicated to our DPO via dpo@itu.dk, in the event that you have any questions or are dissatisfied with our processing of your personal data in any way. In this way, we hope to achieve a joint solution concerning your inquiry.
Finally, you also have the right to file a complaint with the Danish Data Protection Agency concerning our processing of your personal data. You may read more about this and find the Danish Data Protection Agency’s contact details via https://www.datatilsynet.dk/.
You may withdraw your consent for ITU to process your personal data at any given time, pursuant to GDPR Article 7. This is done in the same manner in which the consent was given. You must therefore contact the data processor at the following address: esvi@itu.dk, whereupon ITU will immediately cease the processing in question.
You are invited to participate in this research study. Participation is voluntary, and you may withdraw at any time without penalty. The information collected will be used for research publications only in aggregated and anonymized form.