![DR Technology Logo DR Technology Logo](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt4c091cd3ac9935ea/653a71456ad0f6040a6f71bd/Dark_Reading_Logo_Technology_0.png?width=700&auto=webp&quality=80&disable=upscale)
News, news analysis, and commentary on the latest trends in cybersecurity technology.
DARPA Announces AI Cyber Challenge Finalists
Teams designed AI systems to secure open source infrastructure software to be used in industries like financial services, utilities, and healthcare. Each finalist was awarded a $2 million prize.
August 15, 2024
![a race car on a track against a blurred background a race car on a track against a blurred background](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltecb7c262cbfa9b05/64f171cf2263b30895ad2627/race_car-James_Forrester-Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
Seven teams advanced to the finals after the DARPA AI Cyber Challenge (AIxCC) semifinal competition at DEF CON 32 last week. The teams were each awarded a $2 million prize and will participate in the final competition in August 2025.
A partnership between DARPA and the Advanced Research Projects Agency for Health (ARPA-H), the AIxCC competition had teams design artificial intelligence (AI) systems to secure open source infrastructure software that is used across the private and public sectors in areas like finance, utilities, and health care. These systems are vulnerable to cyberattacks because they have large attack surfaces and lack security tools at scale. Indeed, many have been recent targets, highlighting the urgent need to protect critical infrastructure.
For the competition, teams were asked to develop cyber reasoning systems that could find and fix vulnerabilities in a set of "challenge projects" that were designed by AIxCC experts. Nearly 40 teams submitted systems. The competitors' systems discovered 22 unique synthetic vulnerabilities and patched 15 of them. The systems found 11 unique patches for C-based challenges and four for Java-based challenges. One real-world bug was found in SQLite3 and has been disclosed.
"In true DARPA fashion, we didn't know if our hypothesis would be proven when we launched this program. Now we've seen that AI systems are capable of not only identifying but also patching vulnerabilities to safeguard the code that underpins critical infrastructure," said Andrew Carney, program manager for AIxCC, in a statement.
The following teams will advance to the final:
42-b3yond-6ug
all_you_need_is_a_fuzzing_brain
Lacrosse
Shellphish
Team Atlanta
Theori
Trail of Bits
Teams have one year to develop their systems before next year's final competition. AIxCC will distribute $29.5 million in prize money to the teams judged to create the most effective systems, and winners must release their systems as open source software after the competition.
About the Author
You May Also Like
State of AI in Cybersecurity: Beyond the Hype
October 30, 2024[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024