Thinking in graphs
Dinis Cruz 

CISO Photobox Group, 6th June 2018
This is a presentation about Graphs
Why Graphs?
Graphs are a better framework to look at
the problem
Refactor the problem until the
solution is easy
What is a graph?
What is a graph?
What is a graph?
What is a graph?
What is a graph?
What is a graph?
Graphs in Security
Graphs in Security
Graphs in Security
Threat Models are Graphs
Threat Models are Graphs
Threat Models are Graphs
Some of biggest tech companies are

graph companies
Some of biggest tech companies are

graph companies
Some of biggest tech companies are

graph companies
Ideas are Graphs
Ideas are Graphs
Ideas are Graphs
Jira Workflows are Graphs
Jira Workflows are Graphs
Jira Workflows are Graphs
Source code
Source code
Source code
…are graphs too
…are graphs too
…are graphs too
Git is a graph
Git is a graph
Git is a graph
Hyperlinks are Graphs (i.e. the web)
Hyperlinks are Graphs (i.e. the web)
Hyperlinks are Graphs (i.e. the web)
Wardley Maps
Are Graphs
Are Graphs
Are Graphs
Are Graphs
Neo4J
Neo4J
Neo4J
Neo4J
Neo4J
Cypher (Neo4j query language)
Cypher (Neo4j query language)
Cypher (Neo4j query language)
We opened sourced our Neo4j VisJs Hogo tool
We opened sourced our Neo4j VisJs Hogo tool
And are exploring ways to visualise data
And are exploring ways to visualise data
Jira and Confluence
We use Jira as a Graph Database
We use Jira as a Graph Database
Global Key
We use Jira as a Graph Database
Labels
Global Key
We use Jira as a Graph Database
Labels
Extra 

Attributes
Global Key
We use Jira as a Graph Database
Labels
Extra 

Attributes
Global Key
Workflows
We use Jira as a Graph Database
Labels
Extra 

Attributes
Global Key
Workflows
Assignments
We use Jira as a Graph Database
Labels
Extra 

Attributes
Global Key
Workflows
Assignments
TimeStamps
We use Jira as a Graph Database
Labels
Extra 

Attributes
Global Key
Workflows
Assignments
TimeStamps
Linked to Epic
Epic captures all risks and tasks
Epic captures all risks and tasks
Confluence page captures facts
Confluence page captures facts
Hyperlinked risks
We use Confluence to view the data
How we handle incidents/events
Task Response is used to capture result
Group Security Projects as Jira Issues
Group Security Projects as Jira Issues
Group Security Projects as Jira Issues
Here is our Jira Schema
GDPR
Thinking in Graphs is about
Thinking in Graphs is about
creating mental models
Thinking in Graphs is about
creating mental models
that allow you to
Thinking in Graphs is about
creating mental models
that allow you to
understand and act
And Wardley maps
are graphs to :)
Thanks

Thinking in Graphs