arXiv (Computer Science - Cryptography and Security) • 2h
DARPA AIxCC: The Evolution of Autonomous Cyber Reasoning Systems CRS and the NOVA Architecture
The DARPA AI Cyber Challenge (AIxCC) demonstrates a technical shift from LLM-assisted coding to fully agentic Autonomous Cyber Reasoning Systems (CRSs) capable of managing the entire vulnerability lifecycle. These systems utilize modular architectures—integrating orchestrators, tool-use loops, and verification engines—to automate the discovery, exploitation for verification, and remediation of software flaws. This advancement, exemplified by Palo Alto Networks' NOVA system, has identified over 14,000 previously unknown vulnerabilities. The transition addresses the critical need for rapid, industrial-scale remediation within the Open Source Software (OSS) supply chain to counter the "vulnerability burst" facilitated by frontier AI models.