United StatesPublic sector2022 – ongoingCybersecurity and Infrastructure Security Agency
CyberSentry critical infrastructure network anomaly detection
CISA deployed anomaly detection for CyberSentry, which ingests hundreds of terabytes daily
Problem
CyberSentry collected network data at a scale that made malicious activity difficult to find. Analysts needed to filter background activity while investigating threats against infrastructure partners.
Approach
CISA developed machine-learning detections for patterns and anomalies in partner network data. The system supported automated and manual triage, with query tools and alert dashboards for analysts. The federal inventory recorded deployment in January 2022.
Results
Takeaway
The inventory documented operational scale and analyst support. It did not quantify detection accuracy or analyst time saved.
Categories
- Industry
- Public sector
- Business function
- IT and R&D
- Innovation type
- Process innovation
- AI technology
- Predictive analytics and ML
- Adoption
- Built in-house
- Evidence
- Company's own claim
Sources
Source summaries
CISA's entry classified its network anomaly detection system as deployed and internally developed. It described daily ingestion of hundreds of terabytes and machine-learning alerts supporting analyst triage.
Full details are in the original sources.
