Whether you're a solutions provider or an information security practitioner, it is often helpful to pull back the curtains and see what others are attempting to do in cybersecurity.
That's one of the main reasons leaders attend SecureWorld, and it is also the reason our team is passing on these cyber objectives the U.S. Army has just laid out in a "presolicitation notice."
In a big sense, the Army says it is looking for cybersecurity tools powered by AI and Machine Learning to secure its tactical networks and communications.
However, it also spells out specific goals for tools that will help automate and orchestrate certain security functions.
8 specific objectives for the Army's autonomous security project
Here are the IT security specifics the U.S. Army is trying to achieve:
1. Autonomous detection and mitigation of known vulnerabilities
2. Autonomously identify and correct misconfigurations in networks and hosts
3. Autonomously detect known and previously unknown malware samples
4. Develop tools and methodologies to red team autonomous decision making engines
5. Improve robustness of autonomous decision engines to attacker manipulation
6. Build a collection of ML based cyber agents with each tailored to a specific application, data flow, and message set that can detect and deduce the intent of an attack
7. Design an interface that leverages human in the loop feedback to autonomous decision engines to improve performance and efficiency of human-machine teams
8. Correlate cyber response recommendations and generate a course of action based on available cyber tools and ongoing cyber events
Have more time? Read the autonomous cybersecurity notice for yourself.
If you're a vendor, keep an eye out for when this project goes out to bid.
And if you're a security practitioner, how do the Army's autonomous security objectives compare with those at your organization?
