Mohammed Kharma

dblp:340/1623 · DBLP profile ↗
← Back
2ranked-venue papers
1as first author
2since 2021 · last 2027
0000-0001-8280-3285ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021Security and privacy · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Software engineering, system software, and programming languages
1 paper
Program analysis · 87% Program synthesis and code generation · 13%
Network and information security
1 paper
Systems and software security · 100%

Topics — the 4 heaviest of 4, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Systems and software security › secure software development
secure code generation
1.012026
Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis · IEEE Trans. Dependable Secur. Comput. 2026
Program analysis
security analysis
1.012026
Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis · IEEE Trans. Dependable Secur. Comput. 2026
Program analysis
static analysis
1.012026
Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis · IEEE Trans. Dependable Secur. Comput. 2026
Program synthesis and code generation
code generation with language models
0.312026
Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis · IEEE Trans. Dependable Secur. Comput. 2026

Methods — techniques the papers use, named apart from their topics

static analysis · 2.0large language model · 2.0
YearPublicationVenuePosition
2027 Adversarial vulnerability under temporal concept drift: A longitudinal study of android malware detection
Ahmed Sabbah, Mohammed Kharma, Radi Jarrar, Samer Zein, David Mohaisen
Expert Syst. Appl.2
2026 Security and Quality in LLM-Generated Code: A Multi-Language, Multi-Model Analysis
abstract
Artificial Intelligence (AI) driven code generation tools are increasingly used throughout the software development lifecycle to accelerate coding tasks. However, the security of AI-generated code using large language models (LLMs) remains underexplored, and recent studies have revealed various risks and weaknesses. This paper presents a measurement study of LLM-generated code across four programming languages (Python, Java, C++, and C) and five widely used LLM families. We construct a manually curated dataset of 200 programming tasks, grouped into seven functional and security-relevant categories, each with language-neutral specifications. For every combination of task, language, and model, we generate code and evaluate it along three axes: syntactic validity and compilation success, semantic correctness using 4,000 per program unit test files, and software quality and security using SonarQube and CodeQL, complemented by manual review of key static analysis findings. Our results show clear language effects: Python and Java achieve higher compilation and semantic correctness rates and produce fewer security findings than C and C++, where we observe more memory safety issues, hard-coded secrets, and cryptographic misuses. We also find that many models fail to make use of modern security features available in recent compiler and toolkit updates (i.e., in Java 17), and that outdated methods remain common, particularly in C++. These findings highlight the need to advance LLMs so that they better align with emerging secure coding practices and language-specific best practices. All code and data are available at GitHub.
Mohammed Kharma, Soohyeon Choi, Mohammed Alkhanafseh, David Mohaisen
IEEE Trans. Dependable Secur. Comput.1