OSS-CRS：为现实世界开源安全解放AIxCC网络推理系统 / OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
1️⃣ 一句话总结
这篇论文提出了一个名为OSS-CRS的开放框架，它解决了DARPA竞赛中开发的先进网络安全系统无法在现实世界中直接使用的问题，通过让这些系统能在本地部署并有效管理资源，成功地在多个开源项目中发现了新的高危漏洞。
arXiv 提交日期: 2026-03-09
Abstract - OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
DARPA's AI Cyber Challenge (AIxCC) showed that cyber reasoning systems (CRSs) can go beyond vulnerability discovery to autonomously confirm and patch bugs: seven teams built such systems and open-sourced them after the competition. Yet all seven open-sourced CRSs remain largely unusable outside their original teams, each bound to the competition cloud infrastructure that no longer exists. We present OSS-CRS, an open, locally deployable framework for running and combining CRS techniques against real-world open-source projects, with budget-aware resource management. We ported the first-place system (Atlantis) and discovered 10 previously unknown bugs (three of high severity) across 8 OSS-Fuzz projects. OSS-CRS is publicly available.
源自 arXiv: 2603.08566