Working with maintainers and responsible reporting

In this final episode of our AI Cyber Challenge (AIxCC) series, CRob and Jeff Diecks wrap-up the journey from DARPA's groundbreaking two-year competition to the exciting collaborative phase happening now. Discover how winning teams are taking their AI-powered vulnerability detection systems into the real world, finding actual bugs in projects like the Linux kernel and CUPS. Learn about the innovative OSS-CRS project that aims to create a standard infrastructure for mixing and matching the best components from different systems, and hear valuable lessons about how to responsibly introduce AI-generated security findings to open source maintainers. The competition may be over, but the real work—and collaboration—is just beginning.

This episode is part 4 of a four-part series on AIxCC:

• AIxCC part 1: From Skepticism to Success: The AI Cyber Challenge (AIxCC) with Andrew Carney
• AIxCC part 2: From Skeptics to Believers: How Team Atlanta Won AIxCC by Combining Traditional Security with LLMs
• AIxCC part 3: Buttercup's Hybrid Approach: Trail of Bits' Journey to Second Place in AIxCC

Chapters:

00:00 - Welcome and Introduction to AICC

01:37 - OpenSSF's AI Security Mission: Two Lenses

03:54 - Competition Highlights: What the Teams Discovered

07:43 - Real-World Impact: From Research to Production

10:44 - Lessons Learned: Working with Open Source Maintainers

13:13 - OSS-CRS: Building a Standard Infrastructure

14:29 - Breaking Down Walls: Post-Competition Collaboration

15:39 - How to Get Involved

Episode links:

• Jeff Diecks LinkedIn page
• Christopher “CRob” Robinson LinkedIn page
• AI Cyber Challenge (AIxCC)
• OSS-CRS Project
• OpenSSF AI/ML Security Working Group
• Cyber Reasoning Systems Special Interest Group (Slack)
• Get involved with the OpenSSF
• Subscribe to the OpenSSF newsletter
• Follow the OpenSSF on LinkedIn