Attack of the Graph: Visual Tools for Cyber Analysis
summary
Covers using interactive network visuals to find real cyber risk: mapping package dependency trees (NPM example) to surface downstream vulnerable packages, stitching threat intel into knowledge graphs to join disparate indicators, generating dynamic asset relationship maps to reveal access-based attack paths, and blending logs into UEBA by overlaying timelines to compensate for missing keys. Tools and approaches named: force-directed graphs, Graphis/Gephi/D3, graph DBs like Neo4j, browser toolkits from vendors; common failures are hairballs, data quality, latency and noisy physics simulations, while time-overlay linking often rescues disconnected sources.
AI-written summary · about
chapters (9)
- 0:00Introduction to visual cyber analysis
- 2:48What is visual network analysis
- 7:01Seven challenges in cyber visual analytics
- 10:10Tools for visual network analysis
- 12:38Dependency analysis with graphs
- 15:04Asset relationship maps in cyber
- 17:10User entity behavior analysis
- 19:15Centrality in cyber threat detection
- 19:56Summary and Q&A
related talks
45mConnecting the dots to go from tabular security incident data to behavioral graph understanding
26mBreaking the Attack Graph: How to Leverage Graphs to Strengthen Security in a Domain Environment
29mBuilding a Graph User-Interface for Malware-Analysis
30mCybersecurity Risk Assessment Using LLM Agents and Graph Data Science
43mVisualising networks
40mHow to Map Networked Devices Using Graph-Based AI to Preempt Cyber Threats
33mDecoding Cyber Threats: A Practical Guide to Using Attack Trees
29mAttack Defense Graph Analysis for Supporting SOC and CSIRT Operations