🔥The 9th Round of Easy Loan, Earn $40 Reward is in progress❗️ ⏰ Promotion Period: January 15th - Feburary 15th, 2025 👉 Register now and check more details at gate.io/campaigns/358

Ever wonder why reproducing physical sensor attacks is so difficult? What are the hidden factors that make the attacks successful? My IEEE S&P 2024 paper explores these questions and reveals a surprising truth: 🧵(1/2)

Congratulations to the b01lers undergraduate team at Purdue for winning iCTF 2023, organized by the The ACTION NSF AI Institute ! This was a week-long competition with challenges at the intersection between AI and security.

Congratulations to b01lers for Winning iCTF! b01lers action.ucsb.edu/news/congratul…

Congrats to the 7 companies that will receive $1 million each to develop AI-enabled cyber reasoning systems that automatically find and fix software vulnerabilities as part of the #AIxCC Small Business Track! Full announcement: darpa.mil/news-events/20….

We are so back 😎 support.shellphish.net/blog/2024/03/1…

Thrilled to announce I'll be joining the CS Department at Indiana University, Bloomington (IU Bloomington, IU Luddy) as an Assistant Professor in Fall 2024. Huge thanks to my mentors and beloved family members for their unwavering support. Super excited about this new chapter!

PurSec Lab is proud to lead the initiative to secure cyber physical systems under the DARPA firefly program. Stay tuned for exciting tools we’re baking in-house for this initiative!

Introducing ARTIPHISHELL! An LLM-Based Cyber Reasoning System made by Shellphish that autonomously finds and patches vulnerabilities for the DARPA AIxCC competition (support.shellphish.net)

ARTIPHISHELL was made possible through the $1M DARPA AIxCC Small Business Track prize (and a dangerous amount of caffeine)

In our testing, ARTIPHISHELL finds and successfully patches all the OSS challenge problems (such as nginx, Jenkins, and THE LINUX KERNEL) as well as several OSS-Fuzz programs!

Whatever happens in the competition, it was a crazy journey, made possible through the blood, sweat, tears and red noses of the Shellphish team as well as support from Arizona State University, UC Santa Barbara, and Purdue University, not to mention the Shellphish Support Syndicate

I wrote about ace hacking team Shellphish and the DARPA quest to make AI patch software flaws for us. See it in the The Washington Post.

AI Cyber Challenge Semifinal Competition results are in! Congratulations to the top seven scoring teams who will advance to finals, and to all the competitors who worked to help safeguard the code that underpins critical infrastructure. More: darpa.mil/news-events/20…

WE QUALIFIED FOR AIxCC FINALS!!!!

Interested in graduate studies? Consider applying for a PhD in CS at Purdue. I am seeking motivated students with interests in software/systems security, binary/program analysis, and mobile security. The deadline for Fall'25 is Dec. 20. You can reach me at: [email protected]

As promised, the 2024 ACSAC CTF is now LIVE and playable on pwncollege , complete with game-used challenge interface and the ability to win the sweet 🌴 award for solving all the challenges