~/talk

Cracking the Code: Unveiling Synergies Between Open Source Security and AI

on YouTube 53m
Talkat RSA Conference 2024 · 2024-05-06..05-09· [security, open-source]

speakers

name:Perri Adams
links:none on file
name:Omkhar Arasaratnam
website:https://omkhar.net

resources

video:https://youtu.be/po5TqGxk3us
slides:none on file

summary

Session describes AIxCC, a DARPA and OpenSSF competition that requires teams to deliver open source tools which autonomously find and fix vulnerabilities in real projects (not synthetic code), scores prioritize patch effectiveness over mere discovery, and support multiple languages and vulnerability classes (memory corruption, logic, web flaws). Semifinals run at DEF CON with top semi teams winning $2M each; total prize pool is $30 million. Models bundled with tools must be open source; training data is not required.

AI-written summary · about

chapters (12)

  1. 0:00Open source security and AI
  2. 1:25DARPA and OpenSSF collaboration
  3. 5:45Open source security challenges
  4. 9:02Software security vulnerabilities
  5. 12:16Top-down vs bottom-up security
  6. 17:57Open source security strengths
  7. 19:45AI model security challenges
  8. 23:08AI for vulnerability discovery
  9. 27:12AIxCC challenge structure
  10. 36:11AIxCC scoring algorithm
  11. 42:27Q&A
  12. 51:25Call to action

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.