A senior U.S. Cyber Command official says an AI tool developed to help the Department of Defense defend its networks is proving effective in trials and could be expanded in the future.
The capability, known as Panoptic Junction, is part of an effort undertaken by Army Cyber Command, Cybercom’s service component command.
“ARCYBER is piloting an AI, machine learning platform that enables scalable, continuous security monitoring of networks and platforms. Analyzing system compliance, threat intelligence, and streaming cyber event data, human analysts It provides sophisticated detection of adversary activity, malware, and anomalies at speeds not possible. But it’s not just fast, it’s agile, capturing the pulse of the network and simultaneously ingesting threat information in real time. And Morgan Adamski, CyberCom’s executive director, said on Wednesday’s CyberTalk, “The company is looking at these security options in terms of what’s most applicable to the specific architectures we support. We are carrying out an evaluation.”
The evaluation series began in April.
Adamski told DefenseScoop that officials have already experienced “a lot of great success” with the technology.
“We have increased operational and maintenance efficiency. This has increased our ability to identify risks and detect adversary activity. ,” she said on the sidelines of the meeting.
“Part of the purpose of creating these pilots is to test their efficiency and determine if it can be applied to an enterprise-wide approach, and this shows a lot of promise,” Adam Mr. Ski added. “Our hope is that we continue to see good results come out of that, and then we can make that decision and roll it out into the financing side of large companies.”
A few months ago, CyberCom launched an AI task force within the Cyber National Mission Force. CNMF is a semi-integrated command under Cybercom, comprised of 39 integrated teams and considered to be home to some of the most talented cyber operators in the Department of Defense.
Adamski said the task force will explore applications in real-time within the context of operational execution and will make AI capabilities immediately available over a 90-day period.
“We found that we needed operational use cases, real-world practice on how to leverage AI, to learn the way forward and provide better information. ” she said in her conference keynote address.
The Department of Defense Information Network (DODIN) is large, with more than 3 million daily users worldwide. And Adamski points out that they are frequently exposed to digital attacks.
AI technology is seen as a solution to quickly analyze potential threats to networks and quickly deploy defenses.
The task force oversees a number of initiatives across the enterprise, including Panoptic Junction.
“The Cyber National Mission Force oversees the AI Task Force, and the AI Task Force is responsible for overseeing all these pilot activities across the Cyber Mission Force. So it’s unique to the Cyber National Task Force. It can be specific to the cyber component,” Adamski explained, adding that the task force is “gathering and capturing all the great things that are happening across[the services]. “Cyber Components”, including ARCYBER.
She noted that the members of the task force, which is currently still small, have strong technical skills.
“We’re building that team as quickly as possible, and we’re also partnering with (federally-funded research and development centers), research institutes, and the private sector. So we’re leveraging that technical talent as much as possible. We want to ramp up quickly,” Adamski told DefenseScoop.