Our team, “All You Need Is A Fuzzing Brain”, led by Jeff, was one of seven finalists in DARPA’s Artificial Intelligence Cyber Challenge (AIxCC), placing 4th in the final round. During the competition, we developed a Cyber Reasoning System (CRS) that autonomously discovered 28 security vulnerabilities—including six previously unknown zero-days—in real-world open-source C and Java projects, and successfully patched 14 of them. A technical report is available here. The complete CRS is open source at here.
Big congratulations to the whole team, particularly Jeff and all TAMU students (Ze, Qingxiao, Jianwei, Matthew, etc)!