Jacob Finkelman shares his first month as AI Security Engineer in Residence at the Rust Foundation, a role funded by the Alpha-Omega Project. The work focuses on using AI tooling to scan Rust crates for security vulnerabilities. Key activities include building a prioritized database of crates using metrics like download counts, unsafe usage, and build scripts, then scanning the top 200+ crates with the open-source Scrutineer tool. Several valid bugs have been found and are being addressed with crate maintainers. The role also involves community engagement with security researchers, AI developers, and maintainers to develop scalable processes for handling AI-generated bug reports responsibly.
1.1K Impressions