CISA Looks to Upgrade Einstein Intrusion Detection Capability

The Cybersecurity and Infrastructure Security Agency is considering modernizing or replacing Einstein, one of the key technologies within the National Cybersecurity Protection System, which provides federal network defense.

CISA is seeking industry feedback to inform future plans for the Einstein system. According to a request for information, the changing threat landscapes brought by technological advancements highlighted the tool’s limitations to protect federal civilian executive branch agencies.

CISA said it plans to modernize existing Einstein sensors that provide network visibility and augment them with another solution or replace the intrusion detection capability with a new tool that can better address cybersecurity risks brought about by the increased use of cloud technologies, FedScoop reported. Interested parties should submit their responses to the RFI by July 14.

For fiscal year 2024, the agency asked $67 million from Congress for Einstein improvements, including replacing email filtering tools for intrusion prevention with the agency’s new Protective DNS service.