DHS scientists to show AI

The inclusion of network security tools powered by artificial intelligence in the DHS showcase confirms that RSA will mark the arrival of a new generation of cyber tech.

Scientists from the Department of Homeland Security will be at the annual RSA Conference next week, showcasing new cybersecurity technologies ready for the marketplace, including several involving artificial intelligence.

The news seems to confirm what many observers are predicting: the massive security conference in San Francisco will be a coming-out party for a new generation of cybersecurity technology powered by machine learning, or AI.

A dozen new, leading-edge technological tools developed by academic institutions or the U.S. national labs will be on display, DHS Science and Technology Directorate Spokesman John Verrico told CyberScoop.

“These are technologies that we are sponsoring through our ‘Transition to Practice’ program,” Verrico said.

DHS conducts regular “tech foraging” at federally funded academic institutions and selects about eight mature cybersecurity technologies a year for the 36-month program, according to its website. The selection focuses on gaps that DHS sees in the commercial marketplace, according to the website. The program is designed to help technologies get across the so-called “valley of death” between development and adoption via the marketplace.

The tools being showcased at RSA include using some form of AI or machine learning:

• CHARIOT — A tool that uses machine learning to filter open-source social media searches to help eliminate topics irrelevant to cybersecurity analysts. The tool was developed by the Lincoln Laboratory at the Massachusetts Institute of Technology.

• SilentAlarm — A technology for detecting abnormal network traffic developed by the Pacific Northwest National Laboratory that depends on dynamic behavior knowledge. The system uses machine learning and Bayesian inference to construct hypotheses regarding likely malicious activity on the network, and — when confidence about a particular piece of traffic  is sufficiently high — take a security action, like generating an alert or blocking access.

• Dynamic Defense/Network Randomization — Dynamic Defense, developed by Sandia National Labs, uses a set of machine learning algorithms known as “chess master” to detect system patterns that deviate from normal operations, identify malicious activity employ mitigation  measures. It “provides situational awareness to an operator and uncertainty to an adversary.”

The Transition to Practice program includes training for the technology’s inventors, marketing, testing and evaluation, pilot deployment, and outreach. The technologies are “introduced to potential partners, investors, and integrators,” at a nationwide series of demonstration days, including at events similar to the RSA conference. It supports several different paths to the marketplace “including open source, licensing, startups, adoption by cyber operators, and government use.”

The push to designate AI as the next critical infrastructure sector

The designation would unlock a range of federal services, tools and resources for an industry that policymakers view as increasingly tied to national and economic security.

OpenAI’s rogue AI agent shows why we need federal rules for autonomous systems

Where’s the Trump administration line on AI regulation?

Government

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• Jail time for Maine child in 764 marks turning point in federal law enforcement

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

Technology

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

• The Collective Cyber Defense letter wrote your next vendor questionnaire

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Russian national extradited to US for alleged involvement in bank-account takeover scheme

• Attackers exploit zero-days in consistently besieged SonicWall product

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure

• Election official says Tina Peters would be consultant, won’t have access to election systems