According to a global study released by cloud security company Checkmarx, 151% of companies explicitly prohibit the use of TP3T.AI Programming Tools, but almost all development teams (99%) are still using these tools. This phenomenon reflects the difficulty of controlling the use of generative AI in the actual development process.
The study found that only 29% of companies had established any form of governance system for generative AI tools. 70% of companies had no central strategy, and procurement decisions by various departments were often ad hoc and lacked unified management.
As more and moreDevelopersSecurity issues are also increasingly being raised when using AI programming tools. 80% of respondents are concerned about the potential threats that developers may bring when using AI, and 60% are particularly concerned about the "hallucination" problem that may occur in AI.
Despite these concerns, many people remain interested in the potential of AI: 47% of respondents are willing to allow AI to make code changes without human supervision, while only 6% say they have no trust in AI safety measures in software environments.
“The responses from CISOs around the world reveal that developers are using AI for application development, even though these AI tools cannot reliably create secure code, which means security teams are left with a flood of new, potentially vulnerable code to contend with,” said Kobi Tzruya, chief product officer at Checkmarx.
Microsoft’s Work Trends Index report also shows that many employees use their own AI tools when they are not provided with them and often do not discuss this openly, which hinders the systematic implementation of generative AI in business processes.