SCAIFE: An Alert Auditing Classification Prototype
Software Engineering Institute
In this SEI Cyber Minute, Ebonie McNeil explains how the Source Code Analysis Integrated Framework Environment or (SCAIFE) prototype is intended to be used by developers and analysts who manually audit alerts.
SCAIFE provides automatic alert classification using machine learning which gives a level of confidence that the alert is true or false.
The SCAIFE prototype also enables organizations to apply formulas that prioritize static analysis alerts by using factors they care about.