DOE · DOE-456 · record R3331
Machine Learning components within Splunk Enterprise Security
Department of Energy · SLAC - SLAC National Accelerator Laboratory (SC43 OIM)
Overview
- Development stage
- DeployedSource: c) Deployed – The use case is being actively authorized or utilized to support the functions or mission of an agency.
- High-impact designation
- Not high-impactSource: c) Not high-impact
- Impact justification
- This AI system not meet the criteria of any of the six pillars that make up High Impact AI in Memorandum M-25-21
- Start date
- 2020-09-01 (day precision)Source: 2020-09-01T00:00:00
- Withheld from public reporting
- NoSource: a) No
Mission
- Topic area
- Cybersecurity
- Operational functions
- No function tag matched Derived by keyword rules; see methodology
Problem the AI is intended to solve
Clustering and Classification events
Expected benefits
Improved automation of security threat hunting
System outputs
Prediction of expected norms of log events
Technology
- AI classification
- Classical / predictive MLSource: Classical/Predictive Machine Learning: Models trained on data to make predictions or classifications based on identified patterns or relatio…
- System name(s)
- Not reported
- Custom-developed code
- No
- Public source code
- Not reported
Sourcing
- How it was built
- Purchased from vendorSource: a) Purchased from a vendor
- Vendor (as reported)
- Splunk
- Vendors (standardized)
- Splunk
A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.
Data and privacy
- Involves PII
- No
- Privacy Impact Assessment
- Not reported
- Authorization to Operate
- No
- Demographic features
- Not reported
- Training and evaluation data
- Security Log Events
- Federal Data Catalog
- Not reported
Governance
0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.
Pre-deployment testingNo answer reported
AI impact assessmentNo answer reported
Independent reviewNo answer reported
Ongoing monitoringNo answer reported
Operator trainingNo answer reported
Fail-safeNo answer reported
Appeal processNo answer reported
User and public consultationNo answer reported
Potential impacts and how they were identified
Not reported