DARPA Announces AI Cyber Challenge Finalists

Share This Post

Seven teams advanced to the finals after the DARPA AI Cyber Challenge (AIxCC) semifinal competition was held at DEF CON 32 last week. The advancing teams were each awarded a $2 million prize and will participate in the final competition in August 2025. 

A partnership between DARPA and the Advanced Research Projects Agency for Health (ARPA-H), the AIxCC competition had teams design AI systems to secure open-source infrastructure software–used across the private and public sectors in areas like finance, utilities and health care. These systems are vulnerable to cyberattacks as they have large attack surfaces and lack security tools at scale, and many have been recent targets, highlighting the urgent need to protect critical infrastructure. 

For the competition, teams were asked to develop Cyber Reasoning Systems that could find and fix vulnerabilities in a set of Challenge Projects that were designed by AIxCC experts. Nearly 40 teams submitted systems. The competitors’ systems discovered 22 unique synthetic vulnerabilities in the Challenge Projects and patched 15 of them. The systems found 11 unique patches for C-based challenges and 4 for Java-based challenges. One real-world bug was found in SQLite3, and has been disclosed. 

“In true DARPA fashion, we didn’t know if our hypothesis would be proven when we launched this program. Now, we’ve seen that AI systems are capable of not only identifying but also patching vulnerabilities to safeguard the code that underpins critical infrastructure,” said Andrew Carney, program manager for AIxCC in a statement.

The following teams will advance to the final: 

  • 42-b3yond-6ug

  • all_you_need_is_a_fuzzing_brain

  • Shellphish

  • Team Atlanta

  • Trail of Bits

Teams have one year to develop their technology before the final competition. AIxCC will distribute $29.5 million in prize money to the teams judged to create the most effective systems, and winners must release their systems as open-source software after the competition. 

https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltecb7c262cbfa9b05/64f171cf2263b30895ad2627/race_car-James_Forrester-Alamy.jpg?disable=upscale&width=1200&height=630&fit=crop

This post was originally published on this site

More Articles

Article

Navigating SEC Regulations In Cybersecurity And Incident Response

Free video resource for cybersecurity professionals. As 2024 approaches, we all know how vital it is to keep up to date with regulatory changes that affect our work. We get it – it’s a lot to juggle, especially when you’re in the trenches working on an investigation, handling, and responding to incidents.