Analytics and Data Summit 2020

Graph-powered Cyber-security intelligence has recently drawn a lot of attention with the emergence of the Cloud era. Cloud applications generate huge volume of logs which are essential for threat detection and investigation. While such massive volume of data enables to accurately detect multiple threats, the data heterogeneity introduced by multiple data sources makes it challenging to analyze data in the tabular data model. Graph data model bridges the limitation by connecting heterogeneous entities via relationships. In this talk, we present how graph technology enables us to build a smarter and deeper cyber-security intelligence. Specifically, we demonstrate how Oracle Labs PGX and Data Studio enable (a) SaaS Cloud Security team to do in-depth analysis of security alerts with visualization and threat hunting from multiple heterogeneous logs, and (b) ODC Moat team to develop an effective Invalid Traffic Detection model by leveraging features extracted from underlying graph.