Hackers turn to angr for automated exploit discovery and patching

"US$2m prize to build a system that aims to best human offensive and defensive security personnel at exploitation discovery and patching."

With that kind of technology, they should patent it (or insert your own model of commercial success) and make an awful lot more than $2 million.

It will use ...

_{"coverage-guided fuzzing and symbolic execution in a bid to find crashes. It combines the two in a system blending augmented fuzzing through selective symbolic execution"}

Bingo!

Shellfish logo

I hope that this team are paying tribute to J Walkden Fisher by knocking off his signature. (Eagle Comic afficionados, owners of "Britain's Wonderful Fighting Forces" and collectors of vintage motoring magazines should recognise that logo instantly.)

Celestial Barman, please pass a beer to that (cutaway) artist.

Neat. But worrying.

You now have to trust a big piece of software to re-write the rest of your software for you on the fly.

In ways the original developers don't know and could not fix if it's wrong.

For fans of the Bourne films this is Outcome over Treadstone.

Better hope the treatment works.