Phase 5: Security Testing AI-Generated Code · 50 min · Python · Bandit · Semgrep

CWE Patterns in AI Code

AI doesn't write random bugs. It writes the same CWEs every time.

Real-world application: Engineers who can identify AI-concentrated CWE patterns (CWE-1236, CWE-916, CWE-20, CWE-117) demonstrate the ability to target security testing at AI-specific defect categories.

What you will learn

Identify CWE-1236 (incorrect escaping) at 50.7% AI file rate and why AI systematically introduces it
Identify CWE-916 (broken crypto) at 43.1% and why AI gets crypto wrong
Identify CWE-20 (input validation) and CWE-117 (improper logging) patterns in AI code
Understand the 86.8% network attack surface finding and its implications

Introduction

CWE Patterns in AI Code

Objective

Run the CWE pattern analyzer on 4 AI-generated functions. Detect CWE-1236 (incorrect escaping), CWE-916 (broken crypto), CWE-20 (input validation), and CWE-117 (improper logging). Observe the 86.8% network attack surface finding.

AI doesn't write random bugs. It writes the same CWEs every time.

Unlock the full lesson

You've read the first 2 sections. The rest of this lesson covers The Problem, The Concept, Build, Check Yourself, Key Terms & Next — plus a hands-on lab, quiz, and project artifact.

Create a free account — the opening phases of 29 of 35 courses are free, no credit card.