{"id":15261,"date":"2020-02-06T16:30:00","date_gmt":"2020-02-06T16:30:00","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2020\/02\/06\/cybersecurity-ai-is-ready-for-prime-time-why-the-skeptics-are-wrong\/"},"modified":"2026-08-08T17:54:18","modified_gmt":"2026-08-08T17:54:18","slug":"cybersecurity-ai-is-ready-for-prime-time-why-the-skeptics-are-wrong","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2020\/02\/06\/cybersecurity-ai-is-ready-for-prime-time-why-the-skeptics-are-wrong\/","title":{"rendered":"Cybersecurity AI is ready for prime time: why the skeptics are wrong"},"content":{"rendered":"\n

Federal leaders looking at artificial intelligence offerings to strengthen the cybersecurity of their systems are often met with a confusing array of hype that leads to misunderstanding \u2013 and all too often \u2013 to inertia. And, as government decision-makers are well aware, cyber threats against public sector systems are increasing daily and growing in sophistication.<\/p>\n\n\n\n

Unfortunately, overhype about artificial intelligence in cybersecurity only reinforces our human tendency to resist change. Remember how government IT leaders were slow to see the real benefits of cloud technology?<\/p>\n\n\n\n

In just the same way, some federal agency IT experts, even in the face of rising threats to their systems, remain reluctant to examine the commercial off-the-shelf (COTS) applications using AI at scale.<\/p>\n\n\n\n

Perhaps a brief review of what cybersecurity AI is \u2013 and is not \u2013 will be helpful. For starters, confusion (and often inadvertent misinformation) is centered on descriptions about how AI is used.<\/p>\n\n\n\n

Cyber AI is not big data alone.<\/b> Machine learning is not possible using deficient data sets. With consumer-facing AI-based tools such as voice-activated home assistants like Amazon\u2019s Alexa, the Google Assistant or Apple\u2019s Siri, we see how large data sets of consumer behavior – \u201cAlexa, tell me an apple pie recipe\u201d – leverage forms of AI known as \u201cdeep machine learning\u201d or \u201cartificial narrow intelligence.\u201d<\/p>\n\n\n\n

Similarly, for cyber AI, training the data set is essential. Ideally these are solutions that can learn, train, and reliably identify constantly moving threats like complex malware and other file-less attack patterns that are increasingly more common . It\u2019s critical to remember that AI is not a panacea \u2013 yes, effectively training AI algorithms at scale can prevent future attacks, but the human element is still necessary to thwart cyber actors.<\/p>\n\n\n\n

Cyber AI also is not laboratory AI alone.<\/b> One of the clearest distinctions between cyber and other types of AI is whether its functionality can be accomplished in the real world outside the perfect conditions of the laboratory setting. For instance, claims about accuracy and false positive rates should always be interrogated in light of sample sizes. As an example, an AI model that learns only about breach attempts in the financial sector cannot be adequately applied to the intricacies of guarding protected health information in hospitals.<\/p>\n\n\n\n

A solution is only as good as the data<\/b><\/p>\n\n\n\n

For cybersecurity AI to meet the challenges facing federal IT leaders, the data must be relevant to the evolutionary nature of the of threatscape, the increasing demands that the agency\u2019s mission is placing on its systems and the risks posed by the human element from within the agency\u2019s walls.<\/p>\n\n\n\n

For example, it is well understood that many cyber breaches result from human error. A good cyber AI solution can analyze human behavior to anticipate mistakes and correct them proactively as part of the scanning and response functions. To that end, data must be constantly refreshed in order to keep pace with the agency\u2019s requirements – addressing both the internal environment along with changes in the external threat conditions.<\/p>\n\n\n\n

Our experience tells us that the power of cyber AI is unleashed by:<\/p>\n\n\n\n