CYBER

BAE building AI into new cyber tool

BAE Systems’ U.S. arm will develop defensive cybersecurity tools that incorporate automation and mass data ingestion features among others under a $5.2 million contract with the Defense Advanced Research Projects Agency.

The goal is to create dynamic and adaptable threat-hunting technologies that can be used in any large government or commercial organization beyond just the military, said Sam Hamilton, a chief scientist in BAE Systems Inc.’s cyber technology group.

DARPA’s “Cyber-Hunting at Scale” program envisions a combination of both machine learning and cyberattack modeling tools to support both centralized analysis at security operations center and understanding of incidents at local network levels.

That mix of large-scale general analysis and detailed local understanding is currently not possible, Hamilton said. But adversaries are quickly gaining knowledge and access to the same automation and detection methods U.S. companies have and are making progress toward that goal.

BAE will likely first deploy its CHASE program across the company’s own networks before a rollout to Defense Department and other government networks.

The CHASE work in particular is aiming to determine “what kind of conclusions we’re likely to draw and influence (and) feed into our own organizational understanding of how machine learning systems operate, then reach conclusions in blind spots,” Hamilton said. “We’re building a tool that needs to drive human understandable conclusions and work with the development team.”

Federal agencies are exploring automation, machine learning, artificial intelligence and other similar robotic technologies as a means to handle and analyze large amounts of data in real-time. The idea is to give cyber defenders and other IT operators more leeway in applying institutional knowledge and reasoning of the broader landscape.

That said, the machines stand to gain institutional knowledge of their own under the CHASE concept. Beyond just looking for an answer there is also the angle of giving human cyber hunt teams a reason to look at a potential threat situation.

“The automation process has to leave a trail of logic behind decisions so humans can follow it up,” Hamilton said.

BAE has enlisted subcontractors and researchers for the CHASE program such as Digital Operatives, Dr. Ruslan Salakhutinov from Carnegie Mellon University, and Dr. Farshad Khorrami and a team from New York University.

About the Author

Ross Wilkers is a senior staff writer for Washington Technology. He can be reached at rwilkers@washingtontechnology.com. Follow him on Twitter: @rosswilkers. Also find and connect with him on LinkedIn.

Reader Comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

What is your e-mail address?

My e-mail address is:

Do you have a password?

Forgot your password? Click here
close

Trending

  • Dive into our Contract Award database

    In an exclusive for WT Insider members, we are collecting all of the contract awards we cover into a database that you can sort by contractor, agency, value and other parameters. You can also download it into a spreadsheet. Our databases track awards back to 2013. Read More

  • Navigating the trends and issues of 2016 Nick Wakeman

    In our latest WT Insider Report, we pull together our best advice, insights and reporting on the trends and issues that will shape the market in 2016 and beyond. Read More

contracts DB

Washington Technology Daily

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.