aicyberchallenge.com

Visualizing Challenge Projects

The AIxCC challenge projects (CPs) and challenge project vulnerabilities (CPVs) vary in size, scale, and complexity. To communicate the game details to a variety of audiences—including competitors, security researchers, policymakers, and students—the AIxCC Organizers developed code visualization videos to illustrate the scope of the code involved, the impact of vulnerability exposures, and the difficulty of the tasks faced by competitors.

To learn more, take a look at the playlist below and pay specific attention to the color-coded functions highlighted across each CP and CPV: Green connections show the full extent of the code in a particular CP; yellow focuses on code reachable from an interface exposed to competitors; and red narrows down to the path where a CPV is triggered, showing detailed diagnostic information typically used to exploit or patch such vulnerabilities.

Jenkins Overview
Challenge Project (CP)

Jenkins Detail
Challenge Project Vulnerability (CPV)

Linux Overview
Challenge Project (CP)

Linux Detail
Challenge Project Vulnerability (CPV)

Tika Overview
Challenge Project (CP)

Tika Detail
Challenge Project Vulnerability (CPV)

NGINX Overview
Challenge Project (CP)

NGINX Detail
Challenge Project Vulnerability (CPV)

SQlite Overview
Challenge Project (CP)

SQlite Detail
Challenge Project Vulnerability (CPV)