Managing Cybersecurity Controls

expedite the time it takes to find maliscious packets or intent with the agency's network

IT Security Monitoring

Automation, Data Analysis Safeguarding PBGC data and content

IT Security and Privacy Control Assessment

Research, Data Analysis, Content Creation Referencing Federal Cybersecurity and Privacy guidelines, evaluation of controls, interruption of supporting evidence, and generation of…

Cisco ML

Cybersecurity Chatbot

The AI is intended to solve the challenges associated with manual, labor-intensive compliance documentation and assessment processes within GSA IT. Currently, there's a lack of ef…

Elastic Machine Learning Threat Detection (Phase 1)

The AI is intended to solve the problem of identifying and detecting threats within system logs. By utilizing Elastic Machine Learning and Amazon SageMaker, the system performs ti…

Elastic Machine Learning Threat Detection (Phase 2)

The AI is intended to solve the problem of effectively identifying and prioritizing cyber threats. By creating aggregation models and decision tree models, the AI aims to synthesi…

Software Supply Chain Security Research

The AI is intended to solve the problem of time-consuming manual research into security vulnerabilities for third-party software as part of the Software Security Review process. C…

Application Observability Support

To assist OCIO users in monitoring critical applications for performance and availability management on premises and in the cloud environment. AI is used to create a baseline bas…

Digital Identity Verification Services

The AI is intended to solve the problem of securely verifying and authenticating individuals’ identities online, ensuring that users can prove and share their identity safely for…

RegScale

The AI in RegScale is intended to reduce the manual workload, complexity, and latency in compliance management. It automates the extraction and initial drafting of regulatory docu…

AIP Cyber Incident Ingestion

The manual process of parsing out cyber incidents and entering them into the system

Security Team Productivity Enhancement

Manual processing and analysis is resource-intensive and may lack the speed and consistency needed for effective operations.

AI Resolution Notes Generation

Formal closing notes for security incidents take analysts 15–30 minutes to manually draft at incident closure, diverting time from active threat response and creating documentatio…

AI Vulnerability Ticket Deduplication

Multiple security scanners (Tenable, Qualys, Rapid7) report the same vulnerability on the same host, generating duplicate tickets that create 'ticket bloat' and waste remediation…

AI Vulnerability Remediation Assistance

Security teams require environment-specific remediation guidance to determine the optimal patch or configuration change for each identified vulnerability, a process that is curren…

AI-Powered Search and Recovery

During cloud migration (AWS EVS) and disaster recovery operations, locating specific data across backup snapshots, identifying clean recovery points, and performing forensic analy…

Evaluating Cybersecurity Alerts

Explore different mechanisms leveraging AI to inform and expedite cybersecurity processes.

Augmenting cyber threat alerts on the ACES platform with ACES's specific information.

The current Cyberthreat alerts on the ACES platform are difficult to understand and we often see false positives relative to new use cases.

Infosec Chatbot

Information Security AI is a Chatbot that uses generative artificial intelligence (AI) to support users by responding to questions on information security.

Internet of Medical Things (IoMT) Inventory

Automated categorization of medical devices based on MAC Address, installed software, network activity, etc.: the previous method was to schedule down time with clinical staff to…

Forescout: AI Behavioral Anomaly Detection w/ Automated Enforcement

Leverage AI/ML models to learn normal behavior patterns across endpoints, IoT, and OT devices. Identify zero-day threats, insider attacks, or lateral movement by compromised devic…

Report Anomalous VIEWS CCM User Behavior

The AI protects VA sensitive information from insider threat scenarios. Sensitive information includes the unauthorized disclosure of information such as financial records, Vetera…

Heuristic Behavior Analytics

Identify anomalous behaviors from established baselines for VA Accounts and Hosts. The output is a Risk score that is provided to CSOC Analysts to more quickly identify accounts a…