OSS-CRS

OSS-CRS: Open Source Cyber Reasoning System Framework

OSS-CRS is a standard orchestration framework for building and running LLM-based autonomous bug-finding and bug-fixing systems (Cyber Reasoning Systems).

Features include:

• Standard CRS Interface: OSS-CRS defines a unified interface for CRS development. Build your CRS once following the development guide, and run it across different environments (local, Azure, …) without any modification.
• Effortless Targeting: Run any CRS against projects in OSS-Fuzz format. If your project is compatible with OSS-Fuzz, OSS-CRS can orchestrate CRSs against it out of the box.
• Ensemble Multiple CRSs: Compose and run multiple CRSs together in a single campaign to combine their strengths and maximize bug-finding and bug-fixing coverage.
• Resource Control: Manage CPU limits and LLM budgets per CRS to keep costs and resources in check.

Resources:

• Quick Start
• Documentation
• arXiv Paper: OSS-CRS: Liberating AIxCC Cyber Reasoning Systems for Real-World Open-Source Security
• SoK: DARPA’s AI Cyber Challenge (AIxCC): Competition Design, Architectures, and Lessons Learned