AI-Lixer – AI Pipeline Security – Technical Exchange Meetings

Date: 04/23/2024

Vendor: Vulnerability Research Labs (VRL)

Technology/Topic: AI-Lixer – AI Pipeline Security

TEM Video (milTube): https://www.milsuite.mil/video/watch/video/68788

Vulnerability Research Labs TEM Slide Deck Download

______________________________________________

Welcome to the Technical Exchange Meeting (TEM)!

The vulnerability of AI pipelines has become a serious threat to national security and requires continuous monitoring and protection. In addition to malware and other direct attacks, AI systems are at risk of corruption via indirect means, such as poisoning of externally sourced training data, ultimately compromising a model’s accuracy. Vulnerability Research Lab’s (VRL’s) response to this complex emerging threat is AI-Lixir, a wholistic approach to pipeline security that combines novel techniques for AI model validation with robust malware and anomaly detection technology.

AI-Lixir’s two-fold approach to model validation focuses on ensuring high-quality training data and continually assessing a model’s decision-making behavior. Prior to training, TRIM-based data filtering is used to remove poisoned or poor data and preserve system accuracy. As a model is retrained, AI-Lixir employs Explainable AI (XAI) techniques and heatmap-based analytics to identify suspicious changes to its decision focal points, which may indicate compromise.

To safeguard the AI pipeline against malware and prevent exfil of sensitive data, AI-Lixir augments standard signature-based products with three specialized capabilities: Deep Learning/MalConv-based malware detection, Pattern of Life/ML-based anomaly detection, and Heuristic-based detection targeting behaviors of both common and advanced, nation-state cyber actors. These tools reflect VRL’s extensive background in offensive cyber operations (OCO), each leveraging our well-honed offensive expertise to further harden system defense.

______________________________________________

To join the DISA TEM mailing list, please contact: disa.tem@mail.mil

______________________________________________

Disclaimer:

— TEMs do not serve as a marketing venue or request for proposal actions.

— TEMs shall not be interpreted as a commitment by the Government to issue a solicitation or ultimately award a contract.

— TEMs do not serve as an endorsement of any presented technologies or capabilities

— Presentations will not be considered as proposals nor will any awards be made as a result of a TEM session.

— TEMs are public open forums – no proprietary or sensitive information should be presented during TEM sessions. Only publicly facing content is permissible in DISA TEM sessions.