Federal / Audit / Finance

Elastic Machine Learning Threat Detection (Phase 1)

Exact public inventory row

Description

The AI is intended to solve the problem of identifying and detecting threats within system logs. By utilizing Elastic Machine Learning and Amazon SageMaker, the system performs time series analysis on log data to proactively identify potential security breaches or anomalies that might otherwise go unnoticed. This continuous analysis aims to enhance the overall security posture of GSA IT.

AI / analytics pattern

Classical/Predictive Machine Learning

Automation level / stage

c) Deployed - The use case is being actively authorized or utilized to support the functions or mission of an agency.

Expected benefit

Efficiency, productivity, service quality

Controls / human review

Inventory row should be validated against agency governance and M-25-21 controls.