US military turns to AI to automatically transpile risky software
The US Department of Defense's research arm, DARPA, is launching a new program called TRACTOR (Translating All C to Rust).The goal? Develop AI-powered tools capable of automatically converting legacy C code into the safer alternative, Rust.This initiative primarily aims to enhance memory safety, as memory safety bugs such as buffer overflows are a significant source of major vulnerabilities in large codebases.
C is vulnerable to memory safety issues
C, while powerful, is notorious for its vulnerability to memory safety issues. This vulnerability opens the door for hackers to exploit software flaws, leading to security breaches.Rust, on the other hand, is designed with memory safety in mind, making it less susceptible to these attacks.DARPA hopes that by automating the translation process, they can drastically improve the security of critical software systems.Large language models (LLMs) and other machine learning techniques are being considered to achieve this goal.