DEF CON 33 - Winners of DARPA’s AI Cyber Challenge - Andrew Carney, Jason Roos, Stephen Winchell
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 41:33
DARPA's AI Cyber Challenge (AIC) demonstrates that autonomous systems can find and patch software vulnerabilities faster and more effectively than humans, revolutionizing cybersecurity for critical infrastructure 0:30.
Key Takeaways:
• The challenge addresses vulnerabilities in open-source software that underpins critical infrastructure, which is under constant attack and often has patching delays of months or years 1:17
• Teams developed autonomous systems that found and patched 77% of synthetic vulnerabilities across 54 million lines of code, with average patch time under one hour 10:22
• The competition revealed superhuman performance, with teams discovering 18 real-world "zero-day" vulnerabilities and patching 11 of them 13:09
• All finalist technologies will be released open source, with DARPA investing additional $1.4 million to support implementation in critical infrastructure 25:06
The successful AIC competition marks a turning point in automated vulnerability remediation, providing tools that can rapidly strengthen our digital foundations 40:24.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
This morning I'd like to introduce Andrew. Andrew Carney is going to do the introduction for the patching and critical infrastructure announcement for DARPA. Here we go. [Applause] >> Good morning. Good morning everyone. My name is Andrew Carney. I'm a program manager at DARPA and ARPAH and I'm here to talk to you about the AI cyber challenge. So to achieve technology truly indistinguishable from magic, we need infrastructure and software that is extremely robust, extremely performant, and extremely resilient. But in today's increasingly software-driven world, we heavily rely on projects developed and maintained by passionate, capable volunteers and donations. Uh and this fuels our critical infrastructure. it it underpins our daily lives. At the same time, that critical infrastructure is u…