> An open-source alternative of Microsoft's SAGE/Springfield would be cool We're working on one (!) and I hope we can offer it for free to non-commercial proje

> An open-source alternative of Microsoft's SAGE/Springfield would be cool We're working on one (!) and I hope we can offer it for free to non-commercial projects. For now, there is Microsoft Springfield [1] for Windows software and Google OSS-Fuzz [2] for open-source software. It is extraordinarily hard to not only get the tech for something like that working but bring it to market. As noted in the video, nearly all the individual pieces of our CRS are open-source but you actually do not want a "CRS." The competition DARPA designed for them involved more than what is necessary to provide value to a development team, e.g., you don't want something that writes IDS signatures, considers "gameplay" or resource contention, or attempts to write automatic patches. You want something that accurately finds and reproduces bugs. We open-sourced the tools we wrote to do that or used tools that were already open-source, like Grr, Manticore, Radamsa, KLEE, and Z3. [1] https://www.microsoft.com/en-us/springfield/ https://www.microsoft.com/en-us/springfield/ [2] https://github.com/google/oss-fuzz https://github.com/google/oss-fuzz