Successful CIOs, CTOs & executives from Forbes Technology Council offer firsthand insights on tech & business.
Among the many professionals experimenting with the possibilities of generative artificial intelligence are developers. GenAI can speed up the code creation process and help devs tap into unique and innovative solutions.
However, if overused or misused, GenAI can also lead to issues ranging from inadequate security to bias. It’s essential for developers to remember to treat generative AI as a tool, not a full-fledged teammate. Below, 20 members ofThere are several important things developers should keep in mind. First, make sure the AI tool being used is secure and has the latest vulnerability patching, along with data protection standards. Provide clear, concise and specific commands to the tool detailing how you intend to use the code being generated, along with the security requirements. Spend time on code review to ensure important standards are met in terms of bias elimination, explainability and so on. - Intellectual property and/or copyright infringement is the biggest concern when using AI-generated code. Most large AI vendors now indemnify users for generative AI usage; if a user is challenged on copyright grounds, the AI vendor will assume responsibility for the potential legal consequences. However, being indemnified requires traceability—the user must be able to prove a snippet of code in their system is indeed from the GenAI tool. - Not all software is created equal; therefore, not all uses of AI-generated code are equal. To capture the maximum value of AI-generated code while protecting against security threats, organizations must have well-integrated application security programs as part of the software development life cycle so that they can manage risk tolerance and security protocols for each application as the code is being implemented. - AI is currently a great assistant but a terrible teacher. Generative AI can be very useful for speeding up routine tasks, helping with the identification of bugs and quickly executing repetitive, well-defined standard procedures. The code must make sense throughout the entire project, not just one file; AI can easily miss that. Treat generative as an intern and engage with it accordingly. - Ensure clarity in your objectives and precision in the questions you ask the AI. Vague queries lead to inconsistent standards. Providing specific examples or context helps refine AI outputs for safer, more effective code integration. - GenAI is an accelerator for application security testing. It has the capability, for example, to scan code bases and suggest remediations, shorten the time a vulnerability exists, and suggest best practices. It is low-risk if utilized as a “co-pilot”—that is, as an assistant to a human security tester or developer who is reviewing large amounts of data . - To mitigate risk, dev teams using AI-generated code must leverage test-driven development. Having the GenAI tool build highly specific test cases prior to tasking it with code generation provides a forcing function. Architects, engineers and developers must consider, with specificity, the expected outputs and define those requirements in GenAI-created test cases. - One tip I share with my dev team is to use AI-generated code as a starting point or for ideation, not as the final product. This encourages developers to critically evaluate and refine the code further. They ensure that the introduction of AI tools complements existing workflows rather than disrupting them, focusing on enhancing developer productivity and code quality. - AI code-generation tools stand to significantly increase the volume of code developers are able to write and produce. However, while these tools can provide relief from growing software demands, they require at least the same level of scrutiny that would be given to code written by a human. Failing to review AI-generated code properly will lead to the introduction of technical debt and, eventually, rework. - Development teams must remain vigilant and implement strict controls on anything built with GenAI so they can feel confident in exploring new ways that business users can leverage it. As users interact with generative AI, this is essential to prevent inadvertently sharing sensitive information, which could lead to data leaks, security breaches and compliance failures. - The most strategic teams building with generative AI are evaluating how to change the quality of productivity with a security-first mindset. Platform-agnostic companies serving as the connective tissue between platforms hold an advantage if they consider both the risks and the user experience. You’re bringing data together across multiple platforms, then aggregating it to produce valuable insights. - Empower developers to validate generative logic before a launch. Frame AI as an accelerator, not a replacement; strong human guardrails equal a controlled boost. Machines are here to augment human work, not replace it! - AI’s propensity for “hallucinations” and unseen vulnerabilities necessitates oversight by someone who’s well-versed in security. Assume that AI-generated code carries risks. You can utilize AI to review its own output for security flaws, but prioritize final validation by a security professional to ensure safety and effectiveness. -Developers tapping into GenAI’s potential for code creation must adhere to modern software craftsmanship principles. They should run code analysis tools on it to avoid security issues creeping in. It should not be blindly inserted without proper human review. Carefully go through the code with the mindset that gaps in knowledge or contextual understanding may need to be addressed before use. - Leveraging GenAI can yield real time savings, especially if you select a tool that will learn from your edits. I would always argue that it’s better to focus on evaluating and approving generated code based on its alignment with your original intent rather than being too focused on the stylistic elements, even if there are specifics that need reworking. - As with all human-written code, it is paramount to perform regular security audits of AI-generated code and to understand what was generated, as it is critical to ensure it meets relevant compliance standards to mitigate risks across production environments. - Developers should establish an “AI operations core” for code generation, ensuring inputs and outputs are sanitized and secure. Use only reputable AI models and tools with strong industry acceptance to mitigate risks, such as model tampering or poisoning. This security-first stack fosters safe, effective AI integration, protecting against emerging threats while leveraging AI’s full potential. -Considering all forms of bias is imperative for maximizing AI’s benefits while minimizing its shortcomings. Make sure you construct development teams with diverse voices and skill sets and a curiosity for experimentation. These teams will be responsible for training the models with unbiased, clean data and stress-testing them to ensure the outcomes generated are both accurate and ethical. - Implement explainable AI frameworks to enhance transparency around how generative AI models produce code. This approach helps teams understand decision-making processes, ensuring the AI-generated code aligns with safety and ethical standards, and facilitates troubleshooting and refinement for effective deployment. - When using generative AI for code generation, it’s essential to abstract your project requirements to protect sensitive information. Always ensure the AI-generated code aligns with similar, not exact, requirements to prevent data exposure. Thoroughly review and test the AI-generated code for security and integration. This approach safeguards your project while leveraging AI’s efficiency. -
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Your Organization Isn’t Designed to Work with GenAIMany companies are struggling to derive value from GenAI because of a fundamental flaw in their approach: They think of GenAI as a traditional form of automation rather than as an assistive agent that gets smarter — and makes humans smarter — over time.
Read more »
Why Adopting GenAI Is So DifficultMore than a year after the launch of ChatGPT, companies are still facing the same question when they first considered the technology: How do they actually go about putting it into business use? Many companies have simply discovered that generative AI tools like LLMs, while impressive, aren’t plug and play.
Read more »
How Can Business Leaders Take The Wheel On GenAI Innovation In 2024?Cofounder and CEO of Adverity. Read Alexander Igelsböck's full executive profile here.
Read more »
NVIDIA’s GenAI Expansion Charts New Path For Enterprise ApplicationsI am a former Editor-in-Chief and now Head of Brand Journalism for SAP, leading the company's native advertising strategy.
Read more »
How People Are Really Using GenAIThere are many use cases for generative AI, spanning a vast number of areas of domestic and work life. Looking through thousands of comments on sites such as Reddit and Quora, the author’s team found that the use of this technology is as wide-ranging as the problems we encounter in our lives.
Read more »
The Key Missing Ingredient In GenAI Transformation Of Customer EngagementAshu Roy is the CEO of eGain Corporation. eGain’s AI knowledge platform automates digital-first, omnichannel customer engagement. Read Ashu Roy's full executive profile here.
Read more »