Problems / AI security and governance, medium

Audit logging every model call

Every model call is written to an audit log (SIEM) that accepts 30 writes in flight.

Free to open. Runs in your browser, no sign-up.

Your goals

Success ≥ 99%, p99 ≤ 5 s.

The traffic

800 requests a second for 30 seconds: 100% request (reads).

The system

What each component does in this design, and what calls it. The simulator mimics each one from these settings.

ComponentIts job hereSettings
Load balancerLoad balancerTraffic enters here.Calls AI app.Layer 4 balancers route by IP and port; layer 7 balancers read HTTP and can route by path or header.–
AI appApp serviceLoad balancer forwards to it.Calls Audit log (SIEM), GPU serving pool.Little's law: throughput ≈ concurrency ÷ latency. 200 slots at 50 ms serve about 4,000 req/s.3 replicas × 500 slots · timeout 30 s
Audit log (SIEM)SIEM / audit logAI app calls it.A SIEM collects logs from everywhere and correlates them to spot attacks.30 slots
GPU serving poolSelf-hosted serving poolAI app calls it.GPU servers batch requests together; throughput rises with batch size until memory runs out.4000 slots

Hints

Try it first. Open one hint at a time if you get stuck.

Hint 1

Audit writes a second × write time.

Hint 2

Look at what got through, or what was wrongly blocked: which filter is responsible for this kind of traffic?

One way to solve it

Give the audit log more capacity.

More ai security and governance problems