Six Degrees of Infiltration
summary
Graph-backed inventory and risk analysis uses a Neo4j graph fed by periodic cron jobs that rebuild state from AWS, GitHub, JIRA, PagerDuty and host agents; package names and versions are linked to CVEs so CVE-package mapping in days yields concrete counts of vulnerable instances. The system infers internet-facing exposure via security groups and load balancers, attributes assets to teams/on‑call, and produces patch prioritization by service and transitive‑risk / lateral‑movement paths. Outcome: actionable prioritization and automated ticket routing, proven at scale (billions of edges possible).
AI-written summary · about
chapters (11)
- 0:00Introduction
- 7:42Deckstack
- 10:10Graph
- 15:52Situational Awareness
- 18:23Internet Exposed
- 22:00Accountability
- 22:48Microservice
- 26:24Isolation
- 27:36Engineering Automation
- 28:35The Reality
- 29:05Summary
related talks
27mNeo4j's Risk Register: Maximise Your Data Insights
30mCybersecurity Risk Assessment Using LLM Agents and Graph Data Science
30mContext Engineering: Connecting the Dots with Graphs
58mNothing to Risk but Risk Itself: Expanding Vulnerability Risk with Internet-Scale Data
28mCapital Project Risk Management With Neo4j
39mUsing GraphDB Technology to Resolve Transitive Vulnerabilities at Scale
31mTransforming Vulnerability Management with Advanced Dependency Knowledge Graphs
11mReducing exposure in the cloud