Security auditing in the age of (good enough) AI

Before code review even starts, agents let us build custom tooling and formal models. Here’s how six months of building with AI agents helped us find real issues in our Miden zkVM audit.
86 points by aray07 30 days ago blog.trailofbits.com 13 comments

Summary

Custom AI agents played a crucial role in identifying real vulnerabilities during a security audit of the Miden zkVM. The article details the innovative tools and formal models developed over six months that enhanced the audit process.

Comments (13 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open