Cyber Risks · Trail of Bits Blog

2016 Year in Review

Summary: Trail of Bits recounts its 2016 work, including a Cyber Reasoning System built for DARPA's Cyber Grand Challenge that audited zlib and settled a $1,000 bet about libotr, plus open-sourced tools such as the GRR fuzzer, a Windows port of Facebook's osquery, the Algo VPN, Tidas, Protofuzz, and PointsTo. The firm also ported over 100 DARPA CGC challenge programs to Linux, Windows, and macOS, grew its Empire Hacking meetup past 500 members, and publicly criticized Verizon's DBIR vulnerability section, after which Verizon and Kenna posted mea culpas.

Bottom line: The firm's claim that its CRS audited code faster, in greater detail, and at lower cost than a human marks automated vulnerability discovery as a practical capability, and its public challenge to Verizon's DBIR shows that widely used breach data can carry misleading analysis enterprise defenders rely on.

Read the original at Trail of Bits Blog ↗