Back to the index

08

Threat Modelling Platform

where
Virtusa, for Dell SecureWorks
when
2015 to 2019
  • Java
  • Angular
  • Python
  • Ansible
  • MySQL

The problem

Vulnerability data arrived from Splunk, Fortinet, Palo Alto Networks and CrowdStrike, each describing the same threats in its own shape.

What I did

Built a threat intelligence ontology that normalises all four into a single queryable model.

What changed

One model to query, rather than four vendors to reconcile.