DOE · DOE-347 · record R3290

Network Security and Analysis

Department of Energy · IM-60 - IM Enterprise Operations and Shared Services (IM)

Find similar use cases DOE profile

Overview

Development stage: DeployedSource: c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.
High-impact designation: Not high-impactSource: c) Not high-impact
Impact justification: It does not meet the requirements to be high impact
Start date: 2019-12-05 (day precision)Source: 2019-12-05T00:00:00
Withheld from public reporting: NoSource: a) No

Mission

Topic area: Cybersecurity
Operational functions: Risk scoring and triage Derived by keyword rules; see methodology

Problem the AI is intended to solve

behavior of attack, triage

Expected benefits

Vectra AI is a Structured and Unstructured machine learning (ML) and Security -Led Artifical Intelligence (AI) tool used to detect patterns, anomalous or previously unseen activities inside petabytes of network and log data within the DOE HQ EITS networking boundary and cloud environments.

System outputs

Prediction: The Vectra AI Platform with Attack Signal Intelligence uses AI to analyze the behavior of attackers, automatically apply triage, correlate, and prioritize each security event or incident.

Technology

AI classification: Classical / predictive MLSource: Classical/Predictive Machine Learning: Models trained on data to make predictions or classifications based on identified patterns or relatio…
System name(s): Networks Enclave
Custom-developed code: No
Public source code: Vendor owned - code not available.

Sourcing

How it was built: Purchased from vendorSource: a) Purchased from a vendor
Vendor (as reported): Vectra
Vendors (standardized): None on the standard list

A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.

Data and privacy

Involves PII: No
Privacy Impact Assessment: Not reported
Authorization to Operate: Yes
Demographic features: Not reported
Training and evaluation data: Network Data flow and system logs
Federal Data Catalog: No

Governance

0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.

Pre-deployment testingNo answer reported

AI impact assessmentNo answer reported

Independent reviewNo answer reported

Ongoing monitoringNo answer reported

Operator trainingNo answer reported

Fail-safeNo answer reported

Appeal processNo answer reported

User and public consultationNo answer reported

Potential impacts and how they were identified

Not reported