OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security

Andrew Chin, Dongkwan Kim, Yu-Fu Fu, Fabian Fleischer, Youngjoon Kim +5 more
3/9/2026
cs.CRcs.AI

No confident code implementation found for this paper. 5 possible matches can be shown below.

Abstract

DARPA's AI Cyber Challenge (AIxCC) showed that cyber reasoning systems (CRSs) can go beyond vulnerability discovery to autonomously confirm and patch bugs: seven teams built such systems and open-sourced them after the competition. Yet all seven open-sourced CRSs remain largely unusable outside their original teams, each bound to the competition cloud infrastructure that no longer exists. We present OSS-CRS, an open, locally deployable framework for running and combining CRS techniques against real-world open-source projects, with budget-aware resource management. We ported the first-place system (Atlantis) and discovered 10 previously unknown bugs (three of high severity) across 8 OSS-Fuzz projects. OSS-CRS is publicly available.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. 5 weaker matches are hidden by default — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

STRIATUM-CTF: A Protocol-Driven Agentic Framework for General-Purpose CTF Solving

82% match2026

Orion: Fuzzing Workflow Automation

82% match2025

CyberSOCEval: Benchmarking LLMs Capabilities for Malware Analysis and Threat Intelligence Reasoning

82% match2025

CryptoScope: Utilizing Large Language Models for Automated Cryptographic Logic Vulnerability Detection

81% match2025

White-Basilisk: A Hybrid Model for Code Vulnerability Detection

81% match2025

Multi-Agent Penetration Testing AI for the Web

81% match2025

Cite this paper

@article{chin2026osscrs,
  title  = {OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security},
  author = {Andrew Chin and Dongkwan Kim and Yu-Fu Fu and Fabian Fleischer and Youngjoon Kim and HyungSeok Han and Cen Zhang and Brian Junekyu Lee and Hanqing Zhao and Taesoo Kim},
  year   = {2026},
  eprint = {2603.08566},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2603.08566v2}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2603.08566.svg)](https://codeofpaper.com/paper/2603.08566)

Discussion