CYBER

BAE building AI into new cyber tool

BAE Systems’ U.S. arm will develop defensive cybersecurity tools that incorporate automation and mass data ingestion features among others under a $5.2 million contract with the Defense Advanced Research Projects Agency.

The goal is to create dynamic and adaptable threat-hunting technologies that can be used in any large government or commercial organization beyond just the military, said Sam Hamilton, a chief scientist in BAE Systems Inc.’s cyber technology group.

DARPA’s “Cyber-Hunting at Scale” program envisions a combination of both machine learning and cyberattack modeling tools to support both centralized analysis at security operations center and understanding of incidents at local network levels.

That mix of large-scale general analysis and detailed local understanding is currently not possible, Hamilton said. But adversaries are quickly gaining knowledge and access to the same automation and detection methods U.S. companies have and are making progress toward that goal.

BAE will likely first deploy its CHASE program across the company’s own networks before a rollout to Defense Department and other government networks.

The CHASE work in particular is aiming to determine “what kind of conclusions we’re likely to draw and influence (and) feed into our own organizational understanding of how machine learning systems operate, then reach conclusions in blind spots,” Hamilton said. “We’re building a tool that needs to drive human understandable conclusions and work with the development team.”

Federal agencies are exploring automation, machine learning, artificial intelligence and other similar robotic technologies as a means to handle and analyze large amounts of data in real-time. The idea is to give cyber defenders and other IT operators more leeway in applying institutional knowledge and reasoning of the broader landscape.

That said, the machines stand to gain institutional knowledge of their own under the CHASE concept. Beyond just looking for an answer there is also the angle of giving human cyber hunt teams a reason to look at a potential threat situation.

“The automation process has to leave a trail of logic behind decisions so humans can follow it up,” Hamilton said.

BAE has enlisted subcontractors and researchers for the CHASE program such as Digital Operatives, Dr. Ruslan Salakhutinov from Carnegie Mellon University, and Dr. Farshad Khorrami and a team from New York University.

About the Author

Ross Wilkers is a senior staff writer for Washington Technology. He can be reached at rwilkers@washingtontechnology.com. Follow him on Twitter: @rosswilkers. Also find and connect with him on LinkedIn.

Reader Comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

What is your e-mail address?

My e-mail address is:

Do you have a password?

Forgot your password? Click here
close

Trending

  • POWER TRAINING: How to engage your customers

    Don't miss our Aug. 2 Washington Technology Power Training session on Mastering Stakeholder Engagement, where you'll learned the critical skills you need to more fully connect with your customers and win more business. Read More

  • PROJECT 38 PODCAST

    In our latest Project 38 Podcast, editor Nick Wakeman interviews Tom Romeo, the leader of Maximus Federal about how it has zoomed up the 2019 Top 100. Read More

contracts DB

Washington Technology Daily

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.