A VALUED CUSTOMER OF THIRDEYE DATA
Merlin Cyber: an AI security platform and a threat search engine
Merlin Cyber delivers cyber security solutions and intelligence capabilities to organisations in highly regulated industries, including the United States federal government. Buyers in that sector evaluate a security product differently from a commercial buyer. What the system does has to be demonstrable, and how it behaves under scrutiny matters as much as how it performs on a good day.
LOCATION
Tysons, Virginia, United States
COMPANY SIZE
Mid-scale Enterprise
INDUSTRY
Information Technology › Explore solutions for this industry
AI-based cyber security platform
ThirdEye Data architected, designed and implemented a next generation cyber security platform that reads network data and analyses threats as they emerge rather than after the fact.
The system performs real-time analysis across very large volumes of network data, continuously assessing what is likely to come next rather than reporting what has already happened. It presents that assessment as a persona-based view, so that what a security analyst sees, what an operations lead sees and what an executive sees are each shaped to the decision that person has to make, drawn from the same underlying analysis. Behind it sits a deep learning analytical and cognitive engine.
Real-time analysis across petabyte-scale network data.
NLP-based threat search engine
The second engagement built a search engine from scratch for real-time, domain-specific text search, so that an analyst asking what is known about a particular threat or vulnerability affecting their enterprise gets a useful answer rather than a keyword match.
Security language is a poor fit for ordinary search. The same vulnerability is described differently across advisories, vendor bulletins and internal notes, and the words that matter are often not the words a person types. We used natural language processing to group the material by what it is actually about rather than by the terms it happens to use, and built the indexing and retrieval around that. The whole system was containerised and deployed onto a platform suited to the customer’s environment.
Related solution: artificial intelligence for cyber security
Security products face a demand most software does not. They have to be fast enough to matter, accurate enough to be trusted, and explainable enough to survive an audit. A model that flags something correctly but cannot say why is difficult to defend in a regulated environment, and an analyst who cannot see the reasoning learns to ignore the output.
ThirdEye Data builds analytical and detection capability into products that security vendors take to market. That means working at the volumes network data actually arrives at, designing so that each person sees what is relevant to their decision, and making the reasoning visible. We have done this for a cyber security vendor serving regulated and federal customers, for an enterprise monitoring platform, and for a government agency needing to search and summarise sensitive material. In every case the constraint that shaped the build was the customer’s environment rather than our preference.
DO YOU HAVE A SIMILAR USE CASE?
Talk to our team to learn more about what we did for Merlin Cyber, and how that experience applies to your own environment.
Explore What We Did for Other Customers
