List All Projects List Graduate Projects List Senior Design Projects List REU Projects Other Undergraduate Projects
Project # 95
PromptSec - Prompt-level Secure Code Generation
| Team Lead: | Marzuque Mashrur Fariz |
| Other Team Members: | Fahmid Al Rifat |
| Faculty Advisor(s): | Faysal Hossain Shezan |
| Department: | CSE |
| Project Type: | REU |
| Title: | PromptSec - Prompt-level Secure Code Generation |
| Abstract: | PromptSec is a framework that helps users turn raw coding prompts into clearer, more secure prompts before any code is generated. Many security issues start early when a prompt leaves out key details like input rules, edge cases, or what the program should never do. In PromptSec, a user submits a prompt, and we “complete” it by adding missing requirements that usually matter for safety (for example, validation, constraints, and unsafe behaviors to avoid). Next, we generate code from both the original and improved prompts and compare the outcomes. We run static analyzers and security scanners to catch common vulnerability patterns, then use that feedback to refine the prompt again. The final output is a strengthened prompt that is complete and secure. Our goal is to make prompt-based code generation more reliable and secure, and to build a library of prompt patterns that consistently lead to safer code. |
| Poster: | View Poster #95 (PDF) |
| Judges Scoring: | Submit Evaluation (judges only) |