01E - Trail of Bits' AIxCC Final Submission

Youtube Video of podcast Shownotes and Links In this episode adamd and Zardus chat with Jeff Huang, Ze Sheng, and Qingxiao Xu from the AIxCC team all_you_need_is_a_fuzzing_brain about their AIxCC final submission. We discuss the innovative use of an AI-focused approach in their CRS. The conversation also highlights the significance of static analysis, performance metrics, and the future of cyber reasoning systems in the context of ongoing advancements in AI. We discuss the importance of local models, strategies for vulnerability detection, and the complexities of patching. Links OS lab

Youtube Video of podcast Shownotes and Links In this episode adamd and Zardus chat with Michael Brown and Evan Downing from the AIxCC team Trail of Bits about their AIxCC final submisson. Trail of Bits discusses their experiences and insights from participating in the AIxCC competition. They discuss the dynamics of their team, the development of their Cyber Reasoning System (CRS) named Buttercup, and the importance of open-source contributions. The discussion highlights the role of fuzzing and contextualization in vulnerability discovery and patching, as well as the integration of large language models in their processes. The team emphasizes the significance of resource management and efficiency in the competition, and they share their vision for future research and applications in the field. They emphasize the importance of choosing the right tools, adapting to evolving standards, and the complexity of their multi-agent system. The conversation also touches on the role of AI in their processes, their strategies for submitting patches, and reflections on their experiences during the competition. Links Trail of Bits Buttercup blog post

Youtube Video of podcast Shownotes and Links In this episode adamd and Zardus chat with Taesoo Kim, Minwoo Baek, HyungSeok Han, and Hanqing Zhao from the AIxCC Team Atlanta about their AIxCC final submisson. Team Atlanta discusses their experiences and strategies in the AIxCC. They discuss team dynamics, communication methods, and the structure of their Cyber Reasoning System, which includes multiple components for different programming languages. The team shares insights on their innovative patching strategies, the use of large language models, and the challenges they faced during the competition. Overall, the discussion highlights the importance of collaboration, effective communication, and the integration of AI in cybersecurity. Links Team Atlanta

Youtube Video of podcast Shownotes and Links In this episode adamd and Zardus chat with David Musliner, Mike Pelican, and Matt McLure from team LACROSSE from SIFT on their AIxCC submission. The conversation covers the team’s background, their experiences in previous competitions, and the architecture of their Cyber Reasoning System (CRS). They discuss the implications of open-sourcing their system, the dynamics of teamwork, and the innovative use of AI in cybersecurity. The episode dives into the technical aspects of their system, including agent communication, task processing, and patch generation, highlighting the challenges and strategies involved in their competition journey. The LACROSSE team discusses their experiences and challenges faced during the AI Cyber Challenge, focusing on vulnerability assessment, patch submission, and the role of LLMs in cybersecurity. They explore the complexities of zero-day vulnerabilities, the strategies employed for patching, and the lessons learned from the competition. The team emphasizes the importance of effective collaboration, the evolving capabilities of AI, and the future potential of combining symbolic reasoning with LLMs. Links SIFT

Youtube Video of podcast Shownotes and Links In this episode adamd and Zardus chat with returning guests Tyler and Tim from team Theori on their AIxCC submission. The Theori team discusses their participation in the AI Cyber Challenge, detailing their unique approach to building a Cyber Reasoning System (CRS) named RoboDuck. The conversation covers the team’s structure, motivation, and the challenges they face, including the potential brittleness of their system and the importance of testing. They discuss the pipeline for analyzing repositories, the use of LLMs for vulnerability detection, and their strategy for submitting patches during the competition. The episode concludes with reflections on the competition and the lessons learned. Links Theori

Youtube Video of podcast Shownotes and Links In this episode adamd and Zardus chat with Xinyu, Dang, Ziyi, and Xinqian from the AIxCC team 42-b3yond-6ug. The team highlights the importance of stability, testing, and collaboration. They share insights on their cyber reasoning system, fuzzing strategies, and the impact of AI models on their work. The team reflects on their experiences, lessons learned, and future aspirations in the field of cybersecurity. Links AIxCC Team 42-b3yond-6ug

Youtube Video of podcast Shownotes and Links In this episode of CTF Radiooo adamd and Zardus discuss the final submission of the AI Cyber Challenge for Shellphish with clasm and honululu. They explore the evolution of the team, the significance of the challenge, and the role of AI in cybersecurity. We discuss the history of DARPA’s cyber challenges, the financial stakes involved, and the collaborative efforts of the team in developing a cyber reasoning system. Clasm and honululu share insights about Team Shellphish’s cyber reasoning system: ARTIPHISHELL. Links AIxCC Shellphish Shellphish Support Syndicate Shellphish AIxCC Team

Youtube Video of podcast Shownotes and Links In this episode of CTF Radiooo adamd and Zardus do a live-from-DEF CON interview with clasm and honululu, the co-captains of the Shellphish AIxCC team. They talk about their approach to the AIxCC qualification competition and their cyber reasoning system ARTIPHISHELL. Finally, we finish with live footage of Shellphish when the seven $2M winning qualifying teams are announced. Links AIxCC Shellphish Shellphish Support Syndicate Shellphish AIxCC Team

Youtube Video of podcast Shownotes and Links In this episode of CTF Radiooo adamd and Zardus talk about the highs (winning $1 million in the AIxCC Small Business Track) and the lows (failing to qualify for DEF CON CTF 2024) of Shellphish. Links AIxCC Shellphish Shellphish Support Syndicate Shellphish AIxCC Team pwn.college

Youtube Video of podcast Shownotes and Links In this unique episode of CTF Radiooo adamd and Zardus chronicle their adventures while playing Nautilus Institute’s DEF CON 31 CTF, all the way from the Friday night before the CTF to early Monday morning leaving to catch a flight. Throughout this episode we talk about the CTF as we’re experiencing it (from a hot tub?!?!), and we catch up with several amazing people in the CTF community, including commentators, players, organizers, and winners (congrats Maple Mallard Magistrates on the win): ZetaTwo, clasm, zanardi, nafod, perribus, negasora, jay, mike_pizza, zaratec, and vie. Unfortunately the sound on the interviews during the CTF after party is not the best, but that’s how recording in a closet in the middle of a party goes! We’ll try to bring on those folks in the future. Special shoutout to our impromptu camerapeople zwad3 and f4c31e55. Links LiveCTF LiveCTF Challenge Source AIxCC Maple Bacon