Standard Chartered- Threat Intelligence using Knowledge Graphs.pdf
0 likes200 views
The document discusses the implementation of a no-code knowledge graph ecosystem, Scypher, by a global bank to enhance threat intelligence and cybersecurity operations. It highlights the capabilities of Scypher in providing contextual insights, managing data risk, and improving operational efficiency through self-service features and flexible data orchestration. Tangible benefits include early identification of security threats, faster resolutions, and enhanced data management, ultimately leading to a more resilient cybersecurity posture.
Standard Chartered- Threat Intelligence using Knowledge Graphs.pdf
- 1. INTERNAL 19/07/2022 Threat Intelligence using Knowledge Graphs Hemanth Prabakaran Head Data Analytics & Insights
- 2. INTERNAL 2 Trust Resilience Client Experience Cybersecurity Challenge as a Global Bank 4 0 Differen t Markets 120 0 Branche s 25,00 0 Group/Countr y Operations 85,00 0 Employee s 5 Line of Busines s Retail Banking Corporate Banking Private Banking Wealth Management Commercial Banking Operations Protect bank assets from external & internal threats Critical Operational Continuity Support Client needs Protect Privacy
- 3. INTERNAL 3 Data in the heart of Operations Client data IT Assets Channels Application Logs Third Party Process Security data Transactions Data Management Platform Client Experience Client Analytics Financial Crime Compliance Cyber Defence & Threat Intelligence Business Continuity Monitoring Privacy Compliance Traditional technologies not helping with context Key Challenges Lack of Context Lack of Intelligence Lot of unstructured data Lack of Insights
- 4. INTERNAL SCyphe r Graph Powered Insights Engine SCypher is no-code knowledge graph ecosystem empowered with graph analytics that brings business and analysts the full power of the graph data. Its most scalable, and highly plug and play to generate insights and actions from your data. Features : Knowledge Graph Lifecycle : Knowledge Graph Based Graph Insights & Analytics Flexible Data Orchestration Self Service Seamless Integration & Security at Scale • Schema Based • Perspectives • Virtual Relationships • Index Management • Node Level Security • Workflow Editing UI (Data IKU) • Data Wrangling • Data Enrichment • Scheduled Execution • Real Time • Onboard Perspectives • Dictionary based Taxonomy • Plug & Play • Intelligent Search • User Defined Action • User Defined Insights • Shortest Path • Nearest Neighbor • Focal point Analysis • Graph Exploration • Open Architecture • Embedded Insights • REST API • Single Sign-on • Role Base Access Control COO DATA LAKE SCypher Knowledge Graph Orchestration Graph Database No Code Knowledge Graph Insight Engine Semantic Graph REST API
- 5. INTERNAL 5 Graph Analytics SCypher <Document title - footer text> Build Perspectives on top of enterprise knowledge graph using self-service capabilities
- 6. INTERNAL 6 Use Cases SCypher ✔ Threat Intelliegnce ✔ Cyber Risk Identification ✔ Operation Continuity in Resolution ✔ Vulnerability Assessment ✔ Patch Management ✔ Identity & Access Management ✔ Data Privacy Risk & Control
- 7. INTERNAL 7 Use Case Threat Intelligence 90-100 80-90 70-80 60-70 50-60 40-50 30-40 20-30 10-20 0-10 High Risk Medium Risk Low Risk Threat Score e.g., Feature 1: URL inside the email contributed 45% to the predicted output Feature 2: Illegitimate domains used in previous attacks contributed 20% Feature 3: Covid theme classified as top intent contributed 20% Contextual Intelligence
- 8. INTERNAL 8 Insider Threat Prevention <Document title - footer text> Contextual risk analysis to prevent potential cyber risk incident
- 9. INTERNAL 9 Intelligent Insights through SCypher in applications <Document title - footer text> High Risk Explore in SCypher Ingested Intelligent Insights into bank application ecosystem
- 10. INTERNAL 10 Tangible Business Benefits with Graphs With help of knowledge graphs , Standard Chartered was able to accelerate and strengthen ecosystem to identify a cyber security event even before impact. Some of materialized benefits are : More security threats identified before impact Faster resolution of security threats Potential breaches avoided More internal threats were identified and managed More critical assets became Cybersafe and Cyber resilient Less staff time spent in compiling security reports ✔ Knowledge based Data Discovery ✔ Persona based Recommendation ✔ Improved access to information ✔ Exploratory & path investigation ✔ Contextualized Search ✔ Automated Insights Secondary Benefits
- 11. INTERNAL 11 <Document title - footer text> Thank You for attending this session , Looking forward to share more