![\"Australia](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/05\/1779832272_693_ImageResizer.ashx.jpeg\")
<\/p>\nAustralia Post is working with a startup called Alpha Level to co-develop and production test two machine learning models that can help it to prioritise cyber security incidents for SOC intervention.<\/p>\n
<\/p>\n
The government business enterprise (GBE) announced the partnership with Alpha Level at the end of last month as a pathway to \u201cboost both the speed and accuracy of threat identification\u201d.<\/p>\n
While Alpha Level has an existing commercial product – an alert management system – Australia Post is not using it, instead co-developing entirely new models that may be commercialised later.<\/p>\n
\u201cWe\u2019re not buying a product from Alpha Level – it is actually a partnership,\u201d Cartwright said.<\/p>\n
\u201cIt\u2019s probably a misused term, but what we are doing with Alpha Level is collaborating on some problems that most of cyber security has – independent of Australia Post – and we\u2019re trying to develop new ways to expose and solve those problems.\u201d<\/p>\n
Cartwright said the initial work is focused on two machine learning (ML) models, both of which address aspects of the \u201coverwhelming volume of alerts and events flowing into a SOC.\u201d<\/p>\n
The intent is to effectively prioritise the incident queue in the security information and event management (SIEM) process \u201cin a way that focuses the attention of the analysts on what needs investigating.\u201d<\/p>\n
Out of billions of events\u00a0recorded in the SIEM every week – from network traffic to security logs – thousands will trigger rules and be flagged as potentially malicious.<\/p>\n
Most of those are either false or benign positives. The SOC winds up investigating a proportion directly – iTnews has elected not to reveal the exact numbers – which leads to a handful of \u201ctrue positives\u201d that require actual intervention.<\/p>\n
One of the models being worked on with Alpha Level aims to filter out the false positives and benign positives faster.<\/p>\n
\u201cIf you can somehow reduce that number, you\u2019ve increased the effectiveness of your team,\u201d Cartwright said. \u201cThey can concentrate on the things that matter.\u201d<\/p>\n
One of the challenges in this space is that signals associated with a more sophisticated threat may be weak or look like legitimate traffic.\u00a0<\/p>\n
Cartwright indicated that ML could be a good way of detecting even weak signals amid a sea of otherwise legitimate system usage and traffic, and flag them for attention correctly.<\/p>\n
The other model the partners are working on aims to reduce the noise in the SIEM, identifying \u201ctrue positive\u201d threats and putting them on top of the action list for analysts.<\/p>\n
\u201cWhat I\u2019d like to do is have my SOC focus on those things straight away. I don\u2019t want them to have to sift through a backlog of signals to get to [the highest priority signals], because response time is important. The sooner you can respond, the less damage is done in the environment,\u201d Cartwright said.<\/p>\n
The ML models, which the partners have been working on for about five months, are presently tagging incidents directly in Australia Post\u2019s SIEM.\u00a0<\/p>\n
Incidents that the models classify as false or benign positives are not culled.<\/p>\n
\u201cWe\u2019ve made a decision that we don\u2019t want any of the alerts to disappear. We still think they need investigation until we\u2019re more confident in the product,\u201d Cartwright said.<\/p>\n
\u201cIt\u2019ll be very unlikely we get to a point where we say AI can decide that we shouldn\u2019t look at this. It will be more [likely that the] AI will recommend to a human that this is low priority.\u201d<\/p>\n
Knowledge exchange<\/p>\n
Cartwright said the partnership between Australia Post and Alpha Level came about when \u201cdominoes lined up.\u201d<\/p>\n
\u201cMany years ago ,when I was in the banks, I worked with the founder of Alpha Level, Dr Joshua Neil. I met him at Los Alamos National Laboratories in the US, I was there on behalf of one of the banks to look at the use of AI and ML in cyber security, and he had a PhD in statistical mathematics. He has a brain as big as a planet, as do most of the people in Los Alamos. It\u2019s quite a fascinating place,\u201d Cartwright said.<\/p>\n
\u201cWe talked about some of the problems he was solving on behalf of that facility, which obviously attracts attention of all sorts, and how they\u2019d developed models to detect anomalies and respond.<\/p>\n
\u201cThat technology we then worked through in one of the banks in Australia. We worked with him to understand how it worked in a commercial environment versus how it worked in that highly restricted environment. We both learned a lot.\u201d<\/p>\n
Fast-forwarding through a few years, Cartwright says he got back in touch with Neil – who had just started Alpha Level – \u201cinterested in solving some cyber problems\u201d.<\/p>\n
That led to discussions and the result was the current partnership.<\/p>\n
The partnership hasn’t yet led to money changing hands, but Australia Post – and at least one other Australian and US company – are getting some thorny cyber security data deluge issues addressed.<\/p>\n
\u201cWe\u2019re not actually paying them for this at the moment,\u201d Cartwright said.<\/p>\n
\u201cBut the benefit to Australia Post is we\u2019re getting their deep expertise. People like Josh are very rare in the world, so having that direct conversation with him and feeding the model and commercialising what we want versus what he thinks we want is very important to us.\u00a0<\/p>\n
\u201cAt some stage they\u2019ll come up with a product on the back of it. They\u2019re a startup, they want to go-to-market with something, and then at that stage we\u2019ll decide if we\u2019ve gotten far enough along this track to justify the investment.\u201d<\/p>\n
Cartwright said that few Australian SOCs had access to the \u201ccalibre of thinking\u201d that the partnership provided.<\/p>\n
In addition to producing specific models, Cartwright said that \u201cskills transfer\u201d is another key deliverable under the arrangement.<\/p>\n
He noted that the transfer is \u201cnot to the extent [that my analysts are] going to become statisticians \u2026 but they get to understand modelling, the pitfalls and the advantages, because there are pitfalls to using ML and AI – I\u2019ve learned that over the past 15 years in cyber security.\u00a0<\/p>\n
\u201cThere\u2019s huge advantages, but you don\u2019t get exposed to that outside of a vendor knocking on the door usually and saying, \u2018Here\u2019s my product, it\u2019s got AI, buy it\u2019. And everyone\u2019s doing that.\u00a0<\/p>\n
\u201cSo, this is actually educating my team too on what does and doesn\u2019t work, what you have to think about.\u00a0<\/p>\n
\u201cThat collaboration is gold.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"Australia Post is working with a startup called Alpha Level to co-develop and production test two machine learning…\n","protected":false},"author":2,"featured_media":696518,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[64,63,44],"class_list":["post-696517","post","type-post","status-publish","format-standard","has-post-thumbnail","category-australia","tag-au","tag-australia","tag-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/696517","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=696517"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/696517\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/696518"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=696517"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=696517"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=696517"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}