Lyft Cartography: Automating Security Visibility and Democratization
summary
Lyft Security Intelligence builds and open-sources Cartography open-source platform, a Python CLI that syncs modular intelligence collectors into a Neo4j graph database to map AWS assets (EC2, S3, RDS, Dynamo, ELB, Route53, simplified IAM) plus GitHub, PagerDuty, JIRA and HR data. It runs periodic cleanup and enrichment jobs to label internet exposure, propagate production/staging tags, generate exposure drift detection signatures, feed Slack incident queries and Superset dashboards, and ships today as a working system used for automation and incident response.
AI-written summary · about
chapters (10)
- 0:00Introduction and concepts
- 4:01Cartography overview
- 5:03Platform architecture
- 7:20AWS intelligence module
- 10:09EC2 network analysis
- 14:31Data visualization
- 18:58Additional modules
- 21:39Contextual data mapping
- 25:19Incident response mapping
- 28:35Future development
related talks
29mCartography: using graphs to improve and scale security decision-making
24mYour company, as a Knowledge Graph - the foundation of cybersecurity’s future
22mInside Out - The Cloud has Never been so Close
26mDisrupting Malicious Traffic with Egress Proxies
14mDeveloping and deploying secure AWS Lambda applications
22mUse generative AI and Amazon Security Lake to enhance threat analysis
30mCybersecurity Risk Assessment Using LLM Agents and Graph Data Science
34mStarting a Security Program: Thrills and Spills