Cyber Reasoning System Glossary
Cyber Reasoning System
A Cyber Reasoning System (CRS) is an automated system that reasons about software flaws, constructs or tests remedies, and acts at machine speed in cyber defence or competition.
The vocabulary predates the current generative-AI wave. DARPA’s 2016 Cyber Grand Challenge placed seven Cyber Reasoning Systems in an all-machine Capture the Flag tournament. The systems automatically found vulnerabilities, protected hosts, generated patches, and searched for weaknesses in their opponents.
The 2026 arrival of language models with serious vulnerability-discovery ability therefore extends an existing research programme. A new architecture is addressing the problem DARPA had already defined: whether machines can detect, reason about, and repair flaws at the speed of network conflict.
An LLM used for security work is not automatically a CRS. The name is earned by the system around the model: tools, program analysis, execution, verification, patch generation, and feedback.
Sources
- DARPA, Cyber Grand Challenge, final event August 4, 2016: https://www.darpa.mil/research/programs/cyber-grand-challenge