Study on Effective Management of Cyber Incidents in Graph Database

摘要

Nowadays, cyber incidents are becoming increasingly intelligent, and they have escalated dramatically. For this reason, our research focuses on finding a solution to counter cyber incidents. We decided to build a multiple- and unified data warehouse, one of the many ways of controlling massive information and gathering meaningful intelligence to respond to cyber incidents. The major idea of this paper consists in correlating information based on the massive data set in a graph database. We concentrated on managing massive information in the cyber area and solving the problem when managing malicious information in a relational database. This project is also developing the system based on the architecture in a graph database. We expect the system to contribute to creating various intelligence types. This paper describes how to manage correlated information for building a data warehouse, which is meant to be a kind of infrastructure for responding to cyber-attacks effectively.