Teaching AI to Find Real Vulnerabilities — David Brumley, Bugcrowd
Brumley discusses designing RL environments for cybersecurity, arguing that true hacking requires a ladder of tasks from simple crashes to full arbitrary code execution. He introduces 'audit tasks' using deterministic graders to measure precision and recall across multiple vulnerabilities.
Read article