Mayhem Blog

Open Source Security Podcast helps listeners better understand security topics of the day. In this episode, David Brumley reflects on the ForAllSecure DARPA CGC win and how it offers a glimpse into the future of autonomous security.

ForAllSecure raises $15M in series A funding, led by New Enterprise Associates.

Learn how we sought to uncover the right solution to address the persistent software security issues that have existed in the market for over two decades. We began our research in a university lab, where a brand new technology was born...

I am truly honored to share that I have been named to MIT Technology Review’s prestigious annual list of Innovators Under 35 as a Pioneer.

Looking at the history of reports, objdump was ripe for additional fuzzing enhanced by symbolic execution. Most of the bugs visible to existing fuzzing tools were already found and patched. If any more bugs were to be discovered by Mayhem, this would be a great indicator that Mayhem can find things other tools cannot.

Mayhem is a fully autonomous system for finding and fixing computer security vulnerabilities. On Thursday, August 4, 2016, Mayhem competed in the historical DARPA Cyber Grand Challenge against other computers in a fully automatic hacking contest...and won.

Why am I excited about the DARPA Cyber Grand Challenge (CGC)? CGC gives the world, for the first time, an objective competition to measure how well different automated tools work on a level playing field.

Aside from our cool research, ForAllSecure also works on creating fun and engaging games to promote computer security. Just about every employee in our company has been involved in Capture the Flag exercises for the past several years, and we have been hosting these online events for our customers...

While you can't automate away the placement of subtle bugs and clever tricks, we can definitely add meaningful sources of variance to challenges.