WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • May 10, 2024

Cyber Sleuth: Finding Hidden Connections in Cyber Data

Jennifer Reif

Defenders think in lists, but attackers think in graphs. Map your IT environment with Neo4j to expose hidden exploit pathways before bad actors strike.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to technology advocacy and connected data systems

Background details on technology advocacy, blogging, and continuous learning interests.

#2 about 2 min

Understanding the complexity of cybersecurity domains

How varied categories like threat intelligence and security operations overlap in the industry.

#3 about 1 min

Analyzing attack chains and multi-step exploits

How attackers use incremental steps from phishing emails to backend payloads to compromise systems.

#4 about 3 min

Identifying threat actors and prioritizing defense strategies

Strategies for distinguishing regular users from bad actors and securing external access pathways.

#5 about 1 min

Summarizing data integration challenges in security operations

The necessity of combining multiple data sources to effectively identify security gaps and model scenarios.

#6 about 2 min

Modeling connected data using graph structures

How representing entities and relationships in a graph format provides a holistic view of networks.

#7 about 4 min

Contrasting logic formats between attackers and defenders

Why traditional list-based defense strategies fail against attackers navigating interconnected systems continuously.

#8 about 2 min

Tracing exploitation paths through connected network assets

Visualizing indirect routes malicious actors take to access high-value targets via vulnerable entry points.

#9 about 3 min

Unifying security views with graph data logic

Using indirect relationships to detect anomalies, recommend actions, and create distinct security segments.

#10 about 4 min

Building nodes, properties, and relationships in graph databases

Defining entities, labels, and directional connections with flexible metadata to represent complex domains.

#11 about 2 min

Methods for importing data into graph formats

Utilizing extraction tools, database dumps, and utility libraries to migrate relational data structures.

#12 about 3 min

Creating and retrieving relationships using Cypher queries

Syntax commands for inserting exact graph patterns and retrieving indirect node connections.

#13 about 2 min

Loading database dumps and cleaning raw files

Instructions for importing structures directly into cloud instances or manipulating flat files with utility libraries.

#14 about 7 min

Running security access queries in the database browser

Executing exploratory queries to discover user permissions, group memberships, and multi-hop network paths.

#15 about 3 min

Visualizing network access paths using natural language tools

Transforming technical statements into accessible visual searches for analyzing user access paths.

#16 about 2 min

Applying conditional styling to highlight critical machine assets

Using page rank algorithms to dynamically color visualization nodes based on their network influence score.

#17 about 2 min

Expanding query scope to identify application execution permissions

Identifying remote abilities like executing commands or delegating credentials across accessible devices.

#18 about 3 min

Detecting potential impact and grouping vulnerable communities

Assessing horizontal access scope and applying algorithms to detect structural communities among affected users.

#19 about 3 min

Calculating shortest attack paths to sensitive domain admin groups

Locating single-hop vulnerabilities connecting compromised accounts directly to high-privilege administrative assets.

#20 about 4 min

Exploring graph resources and technical developer events

Promotional call for papers and links to hands-on sandboxes and academy training lessons.

#21 about 3 min

Prerequisite skills for building graph environments

Understanding data models and basic query syntax for querying connected data platforms securely.

#22 about 2 min

Tracking malware spread and infrastructure with relationships

Applying graph pathways to represent malicious domain dependencies and fraudulent infrastructure.

#23 about 3 min

Integrating artificial intelligence and network feature engineering

Utilizing network connectivity features directly in algorithm models to enhance predictive threat analytics.

#24 about 3 min

Overcoming data latency in defensive intelligence platforms

The ongoing necessity of acquiring accurate and timely information to prevent attackers from bypassing systems.

#25 about 2 min

Enforcing integrity constraints during automated data imports

Balancing the inherent flexibility of graph models with specific property validations and restrictions.

#26 about 3 min

Securing analysis platforms via network access controls

Applying role-based limitations and private cloud infrastructures to protect sensitive graph information.

#27 about 3 min

Transitioning from music backgrounds into software engineering

How initial programming classes revealed logic similarities between musical composition and enterprise technology ecosystems.

Matching moments

1:35 min

Overcoming the difficulty of modeling cybersecurity attack graphs

Prof Smoke Prof Smoke · World Congress 2025

6:00 min

Generating lateral movement security graphs from raw datasets

Prof Smoke Prof Smoke · World Congress 2025

5:08 min

Introduction to graph databases and Cypher

William Lyon · LIVE

2:44 min

Utilizing graph analytics and Neo4j for structural dependencies

Markus Harrer Markus Harrer · World Congress 2021

4:05 min

Demonstrating automated defense strategies at prominent cybersecurity conferences

Ben Hopkins +1 · Coffee With Developers

1:51 min

Exploring inference, extraction, and the adversarial threat landscape

Nura Kawa · World Congress 2023

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
8 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
15 days ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
17 days ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
22 days ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude thumbnail
6:16
24 days ago

Fake or News - AI Music Detectors, Translating Ancient Languages & Tiny Heads in Teslas - Eddie Jaoude

Chris Heilmann, Daniel Cranney

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas thumbnail
5:46
29 days ago

Fake or News: AI Agents Hire Each Other, Spider-Man Ads in Cars & RAM Thieves - Marc Plogas

Chris Heilmann, Daniel Cranney, Marc Plogas

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 24, 2026 · 14:50–15:20

Stage 1

The Era of Machine-Driven Defense is Here: Headless Security

Loris Degioanni

Founder & CTO of Sysdig

Loris Degioanni
Open session

World Congress 2026 North America

September 25, 2026 · 16:50–17:20

Stage 5

The Things Your AI Isn't Telling You

Desmond Lamptey

Lead Software Engineer at Capital One

Desmond Lamptey
Open session

World Congress 2026 North America

September 25, 2026 · 14:50–15:20

Outdoor Stage

On the Public Clock: Open-Source Defense When You're Not in the Club

Nicholas Muy

VP Engineering Platform and Security at Scrut.io

Nicholas Muy
Open session

World Congress 2026 North America

September 24, 2026 · 12:15–12:45

Stage 6

AI vs. AI: Defending the open source supply chain with agentic workflows

Manfred Moser

Senior Principal DevRel Engineer at Chainguard

Manfred Moser
Open session

World Congress 2026 North America

September 24, 2026 · 14:10–14:40

Stage 3

Real-Time Data Platforms at Trillion-Event Scale

Diptamay Sanyal

Principal Engineer | Data, AI & Cybersecurity Platforms

Diptamay Sanyal
Open session

World Congress 2026 North America

September 24, 2026 · 14:10–14:40

Stage 2

Know Your Enemies: Live Exploit of a PHP Engine Security Breach

Alexandre Daubois

CTO of Les-Tilleuls.coop / Symfony Core Team / PHP & FrankenPHP Core Maintainer

Alexandre Daubois

Related videos

From Tables to Graphs in Minutes: Supercharging Kusto Graph Analytics with AI-Powered Development thumbnail
27:31
World Congress 2025 • about 1 year ago

From Tables to Graphs in Minutes: Supercharging Kusto Graph Analytics with AI-Powered Development

Prof Smoke

Your organization as a Graph thumbnail
33:43
Europe 2026 Virtual • 3 months ago

Your organization as a Graph

Dunya Kirkali

Getting under the skin: The Social Engineering techniques thumbnail
43:56
LIVE • almost 6 years ago

Getting under the skin: The Social Engineering techniques

Mauro Verderosa

Checkmate: 5 Real Incidents That Can End a Software Company thumbnail
27:08
World Congress 2026 Europe • 3 months ago

Checkmate: 5 Real Incidents That Can End a Software Company

Jasmin Azemović

Graphs and RAGs Everywhere... But What Are They? - Andreas Kollegger - Neo4j thumbnail
46:51
over 1 year ago

Graphs and RAGs Everywhere... But What Are They? - Andreas Kollegger - Neo4j

Putting the Graph In GraphQL With The Neo4j GraphQL Library thumbnail
47:48
LIVE • almost 5 years ago

Putting the Graph In GraphQL With The Neo4j GraphQL Library

William Lyon

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.