Risk Alleviation via Detection of Information Anomalies in Network Cybersecurity Events (RADIANCE)

Cybersecurity of a transit agency’s interconnected information network is critical to the agency’s operation and maintenance. The FTA is concerned about the emergence of new vulnerable points in transit information network systems caused by the overwhelming number of agile cyber threats. Safeguarding these vulnerable points against an ever-evolving spectrum of cyber threats is necessary. Numerous ML solutions exist for cybersecurity intrusion detection. Most of these solutions perform poorly with disparate, limited data collected in various formats from a transit agency’s cyber-physical systems and stored for a limited duration. The existing solutions either raise false alarms or fail to detect novel cyber intrusion events. During Phase II, PEC will continue to develop a novel ML solution called RADIANCE, which is a data- and application-type agnostic algorithm to effectively detect cyber intrusions from limited information and provide actionable intelligence.