FireEye & ScyllaDB: Intel Threat Analysis using a Graph Database

FireEye believes in intelligence driven cyber security. Their legacy system used PostgreSQL with a custom graph database system to store and facilitate analysis of threat intelligence data. As their user base increased they ran into scaling issues requiring a system redesign with a new platform.

This presentation will focus on the backend systems and migration path to a new technology stack using JanusGraph running on top of ScyllaDB plus Elasticsearch.

Using ScyllaDB turned out to be a game-changer in terms of performance and the types of analysis our application is able to do effortlessly.