509 Security Research Artifacts Audited: Publicly Shared Code Carries Overlooked Security Risks

arXiv·medium signal

Study of 509 research artifacts from top-tier security venues reveals that artifact evaluation checks reproducibility but largely overlooks security risks. Since these artifacts are publicly released and reused, they may unintentionally create opportunities for misuse. First systematic study of this blind spot in the academic publishing pipeline — relevant to anyone pulling research code from GitHub repos linked to papers.