Skip to content

Machine vs Machine: DARPA's Fully Automated CTF

Mike WalkerJordan Wiens

DARPA program manager Mike Walker and Jordan Wiens preview the Cyber Grand Challenge, where autonomous software agents compete in real-time capture the flag.

Summary

Architecture and Background

Mike Walker joined DARPA as a program manager in January 2013. His research interests include machine reasoning about software in situ and the automation of application security lifecycles. Prior to joining DARPA, Mr. Walker worked in industry as a security software developer, Red Team analyst, enterprise security architect and research lab leader.

Vulnerability Analysis

As part of the Computer Science Corporation "Strikeforce" Red Team, Mr. Walker helped develop the HEAT Vulnerability Scanner and performed Red Team engagements. Serving as a principal at the Intrepidus Group, Mr. Walker worked on Red Teams that tested America's financial and energy infrastructure for security weaknesses.

Exploitation and Demonstrations

Also, on the DARPA SAFER Red Team, Mr. Walker discovered flaws in prototype communications technologies. Mr. Walker has participated in various roles in numerous applied computer security competitions.

Remediation and Defensive Strategies

He contributed challenges to DEF CON Capture the Flag (CTF) and competed on and led CTF teams at the highest levels of international competition. Mr. Walker was formerly a mentor of the Computer Security Competition Club at Thomas Jefferson High School for Science and Technology (TJHSST). Jordan started his professional career at the University of Florida where he got to do a little bit of everything security related. His love of CTFs, however, drove him to a job at a government contractor where he honed his reverse engineering and vulnerability research skills. Now, his goal in life is to become a professional CTF e-sports caster so he founded a startup Vector 35 to try to get paid to do stuff with CTFs and gaming.

Related talks

Main Stage·51 min

Shellphish

The Shellphish team shares architectural details of Mechanical Phish, their autonomous Cyber Grand Challenge system for vulnerability discovery and binary patching.

darpa-cgcautomated-exploitationfuzzing+2