用图表赢得美国网络司令部人工智能警报数据挑战.pdf

1、2024 Databricks Inc.All rights reservedWinning the U.S.Winning the U.S.Cyber Command AI Cyber Command AI AlertAlert DataData ChallChallenge with Graphsenge with GraphsDr Alex MorriseDr Alex MorriseJune 13,2024June 13,20241GRAPHISTRYMakers of Louie.AIGRAPHISTRYOperators/analysts,data scientists,&deve

2、lopers:Cybersecurity,fraud,supply chain,IT,fintech,&moreUsers100X Investigations Connect,Use,Embed:Splunk,Databricks,Neo4j,Python,First GPU visual graph AI platform Louie.AI:GenAI-first investigation&automationDistrosSaaS,private cloud,air-gapped22024 Databricks Inc.All rights reserved2024 Databrick

3、s Inc.All rights reserved3The U.S.CYBERCOMM AI The U.S.CYBERCOMM AI Challenge:Imagine Challenge:Imagine being a detective being a detective with the power to see with the power to see crimes.Thats what crimes.Thats what we do with cyber we do with cyber logs.logs.Makers of Louie.AIGRAPHISTRYMakers o

4、f Louie.AIUSCYBERCOM AI Challenge:Landscape of Threats from Fusion Center dataMany bad actors,many locations,and diverse threat modelsMany bad actors,many locations,and diverse threat modelsCESNET:Universities+ISPsIDS,honeypots,malware,phishing,Data are Correlations;use Graph AI to see,understand an

5、d predictSeeing the Attack SurfaceTwo kinds of correlations:-Strongly link identifiers:IPs,hashes,.-Fuzzily link behaviorsGRAPHISTRYMakers of Louie.AIDemo:1.Natural language querying of Splunk&multi-step actions2.Automatic UMAP embedding+visualization of rich tablehttps:/ information:See Graphistry

6、talk at NDC Security 2024GRAPHISTRYMakers of Louie.AIAugment SIEM with security data lake+AI Combine with Splunk/SnowflakeUnify views and reduce noise via queriesGraphistryai directly in databricksGPU Graph intelligence:Viz,querying,&AI-databricks is mostly tabularTurning Logs in