Hamza Khalid

• Email
• LinkedIn
• Google Scholar

Hello! My name is Hamza, and I'm a PhD student at Tufts University. My research looks at how developers interact with AI for secure coding: how they use these tools in practice, where that collaboration breaks down, and how to make it produce code that is actually secure.

Publications

• (Don’t) Trust, but (Don’t) Verify: Developers’ Attention to Security in AI-Generated Code

  Hamza Khalid, Ronald Thompson, Alejandra Sabater, Perucy Mussiba, Kelsey Fulton, Daniel Votipka

  IEEE Symposium on Security and Privacy (S&P) 2027

  PDF arXiv

• “Your imaging may be stone-cold normal, but if they look sick, they're going to get admitted”: An Investigation of Clinicians' Perceptions of Impact & Likelihood of Security Failures

  Ronald Thompson, Hamza Khalid, Hilary Fisher, Rhea Votipka, Daniel Votipka

  USENIX Security 2026

  PDF Link

Posters

• (Don’t) Trust, but (Don’t) Verify: How developers evaluate the security of AI-generated code

  Hamza Khalid, Ronald Thompson, Alejandra Sabater, Perucy Mussiba, Kelsey Fulton, Daniel Votipka

  GREPSEC, co-located with USENIX Security 2026

  Poster