Winners of DARPA’s AI Cyber Challenge
Andrew Carney, Jason Roos, Stephen Winchell
DEF CON 33 · Day 1 · Main Stage
The DARPA AI Cyber Challenge (AICC) is a landmark public competition aimed at revolutionizing software security by developing autonomous systems capable of discovering and patching vulnerabilities in source code. This talk, delivered by DARPA Program Manager Andrew Carney, along with special guest speakers Deputy Secretary of Health and Human Services Jim O'Neal and DARPA Director Stephen Winchell, unveiled the groundbreaking results of the AICC finals. The core objective of the challenge was to transcend the limitations of human-scale vulnerability management, which struggles to keep pace with the vast and complex landscape of modern software, particularly critical infrastructure.
AI review
This is a strategic/results keynote, not a technical research drop — and judged in that lane, it delivers real signal. DARPA announcing 18 real zero-days discovered autonomously, 11 patched, across 54M lines of code, at $152/task, with immediate open-source release and $1.4M in follow-on prizes is not a press release — that's a program manager reporting genuine empirical results on stage at DEF CON. The open-source CRS release is the kind of concrete commitment that actually changes what defenders can do next week.