Accelerating Cybersecurity Log Pipelines and Analytics for Rapid Correlation

Today’s security teams deal with more data than ever before and continue to search for impactful methods to accelerate their log ingest and downstream analytics. In this session, we show how this end-to-end infrastructure is accelerated and augmented using RAPIDS and CLX (Cyber Log Accelerators). We present a use case that shows how raw data can be quickly parsed, enhanced with threat intelligence feeds, and then fed to GPU-based ML techniques for rapid correlation and enrichment. We walk through the architecture, explain how the GPUs are used, present benchmarks and results, and talk some about the larger picture of the value GPU compute brings to cybersecurity workflows.