Video
Jim Manico: Security Rules for AI Code Generation
Special guest speaker Jim Manico, Founder of Manicode Security leads an exploration of the rise of AI in coding, highlighting both the benefits and challenges of AI-generated code, particularly around security.
This session covers how AI tools can improve development speed, consistency, and reduce errors, while also posing risks like resource leaks, insecure data handling, and API misuse. Jim's talk presents a secure AI code lifecycle, focusing on translating security requirements into prompt structures, validating AI-generated code, and iteratively refining prompts. Emphasis is placed on secure prompt engineering to mitigate vulnerabilities and on best practices to ensure AI-generated code aligns with security standards.
About Jim
Jim Manico is the Founder of Manicode Security, a company dedicated to providing expert training in secure coding and security engineering to software developers. His work at Manicode Security reflects his commitment to elevating software security standards in the industry.
This session covers how AI tools can improve development speed, consistency, and reduce errors, while also posing risks like resource leaks, insecure data handling, and API misuse. Jim's talk presents a secure AI code lifecycle, focusing on translating security requirements into prompt structures, validating AI-generated code, and iteratively refining prompts. Emphasis is placed on secure prompt engineering to mitigate vulnerabilities and on best practices to ensure AI-generated code aligns with security standards.
About Jim
Jim Manico is the Founder of Manicode Security, a company dedicated to providing expert training in secure coding and security engineering to software developers. His work at Manicode Security reflects his commitment to elevating software security standards in the industry.
Uniting security professionals on a mission to democratize software security and solve its ever-evolving challenges with the power of Community.
.svg)
.svg)
The information contained in The Purple Book of Software Security and the contents of the Purple Book Community website contain ideas expressed by Purple Book Community members. These opinions are their own, do not reflect the views of the organizations they belong to, and have no affiliation with nor make any endorsement of any commercial products or services, including those of community sponsors.