Google Unveils AI Discovery of 0-Day Security Vulnerability
Google's Project Zero and DeepMind collaborate to create Big Sleep AI agent. Big Sleep identifies zero-day security vulnerability in SQLite. Fuzzing technique supplemented by AI for enhanced vulnerability detection.
This exploit, found in widely used real-world software, marks a significant milestone in cybersecurity. The vulnerability was identified by Big Sleep, a large language model-assisted vulnerability agent created through the collaboration of Project Zero's elite hackers and DeepMind's AI researchers.
Project Zero, known for uncovering zero-day vulnerabilities, and DeepMind, Google's AI research labs, have combined their expertise to create Big Sleep. This powerful agent detected an exploitable stack buffer underflow in SQLite, a popular open-source database engine, before its official release. The vulnerability was promptly fixed by the SQLite development team, preventing any impact on users.
Fuzzing, a technique using random data to expose code errors, has long been a staple in security research. While effective, it has limitations in uncovering all vulnerabilities. The Big Sleep team aims to bridge this gap by leveraging AI to proactively identify vulnerabilities in software before they are exploited. This innovative approach could revolutionise how defenders safeguard against cyber threats.
Google's Project Zero and DeepMind collaborate to create Big Sleep AI agent
Big Sleep identifies zero-day security vulnerability in SQLite
Fuzzing technique supplemented by AI for enhanced vulnerability detection
Source: FORBES