下载PDF
MITRE's CyGraph: Enhancing Cybersecurity Situational Awareness
技术
- 应用基础设施与中间件 - 数据可视化
- 基础设施即服务 (IaaS) - 云数据库
适用行业
- 设备与机械
- 国家安全与国防
适用功能
- 产品研发
用例
- 网络安全
- 入侵检测系统
服务
- 网络安全服务
- 系统集成
挑战
MITRE 的网络安全研究人员需要超越对安全态势和攻击响应的基本评估。这样做需要将孤立的数据合并到网络范围内的攻击漏洞和任务准备情况的更高层次的知识中。
Noel 和他的团队还难以完全理解给定的安全环境并映射所有已知的漏洞。具体来说，这些目标需要一个灵活的架构来适应高级分析、即席查询和图形可视化，而这些都是他们当时所缺乏的。
客户
MITRE公司
关于客户
MITRE Corporation是一家由联邦政府资助的非营利性公司，管理着美国各地的七个国家研发实验室——包括国家安全中心——以解决网络安全问题。 MITRE 成立于 1958 年，从事国防、能源、航空、医疗保健和网络安全等多个领域的项目，在其公私合作伙伴关系和独立研究项目中拥有 8,000 多名员工。
解决方案
当 Noel 和他的团队发现 Neo4j 图形数据库时，他们利用从 Cauldron 中学到的经验开发了 CyGraph，这是一种将网络安全信息转化为知识的工具。
它还包含任务依赖关系，显示目标、任务和信息如何全部依赖于其他网络资产。
特别是，它的知识库提供了一个丰富的框架，用于探索与机构任务准备相关的实体和关系的完整堆栈。
借助图技术，CyGraph 能够优先处理关键任务资产中暴露的漏洞。面对攻击，它将入侵警报与已知的漏洞路径相关联，并提出行动方案。对于攻击后取证，它显示了需要更深入检查的易受攻击的路径。
数量效益
相关案例.
Case Study
Smart Water Filtration Systems
Before working with Ayla Networks, Ozner was already using cloud connectivity to identify and solve water-filtration system malfunctions as well as to monitor filter cartridges for replacements.But, in June 2015, Ozner executives talked with Ayla about how the company might further improve its water systems with IoT technology. They liked what they heard from Ayla, but the executives needed to be sure that Ayla’s Agile IoT Platform provided the security and reliability Ozner required.
Case Study
IoT enabled Fleet Management with MindSphere
In view of growing competition, Gämmerler had a strong need to remain competitive via process optimization, reliability and gentle handling of printed products, even at highest press speeds. In addition, a digitalization initiative also included developing a key differentiation via data-driven services offers.
Case Study
Predictive Maintenance for Industrial Chillers
For global leaders in the industrial chiller manufacturing, reliability of the entire production process is of the utmost importance. Chillers are refrigeration systems that produce ice water to provide cooling for a process or industrial application. One of those leaders sought a way to respond to asset performance issues, even before they occur. The intelligence to guarantee maximum reliability of cooling devices is embedded (pre-alarming). A pre-alarming phase means that the cooling device still works, but symptoms may appear, telling manufacturers that a failure is likely to occur in the near future. Chillers who are not internet connected at that moment, provide little insight in this pre-alarming phase.
Case Study
Premium Appliance Producer Innovates with Internet of Everything
Sub-Zero faced the largest product launch in the company’s history:It wanted to launch 60 new products as scheduled while simultaneously opening a new “greenfield” production facility, yet still adhering to stringent quality requirements and manage issues from new supply-chain partners. A the same time, it wanted to increase staff productivity time and collaboration while reducing travel and costs.
Case Study
Integration of PLC with IoT for Bosch Rexroth
The application arises from the need to monitor and anticipate the problems of one or more machines managed by a PLC. These problems, often resulting from the accumulation over time of small discrepancies, require, when they occur, ex post technical operations maintenance.
Case Study
Robot Saves Money and Time for US Custom Molding Company
Injection Technology (Itech) is a custom molder for a variety of clients that require precision plastic parts for such products as electric meter covers, dental appliance cases and spools. With 95 employees operating 23 molding machines in a 30,000 square foot plant, Itech wanted to reduce man hours and increase efficiency.
