Study Finds Security Neglected in AI Component Selection
A new interview study with 22 software practitioners reveals that security is rarely considered when selecting and integrating AI components, such as large language models, into software systems. Instead, decisions are primarily driven by functional criteria like performance, accuracy, and cost. The research highlights that established lessons from traditional software supply chain security are often overlooked in the rush to adopt AI technologies. The authors recommend adopting a security-by-design approach to better address these emerging risks.
Why it matters: Neglecting security in AI component selection could expose software systems to significant vulnerabilities, repeating past mistakes in software supply chain management.
Full story at: arXiv Cryptography and Security ↗