https://diniscruz.ai/ Essays and research by Dinis Cruz on AI, cyber security, semantic knowledge graphs and the future of news. en Thu, 02 Oct 2025 09:00:00 +0000 https://diniscruz.ai/2025/10/03/genlegaladvise-project-plan.html https://diniscruz.ai/2025/10/03/genlegaladvise-project-plan.html Thu, 02 Oct 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Small businesses, freelancers, and independent consultants regularly encounter legal documents -- consulting agreements, NDAs, service terms, EULAs, data sharing policies -- that are lengthy, dense… https://diniscruz.ai/2025/10/02/time-as-a-calibrator-of-credibility-and-trust-in-information-systems.html https://diniscruz.ai/2025/10/02/time-as-a-calibrator-of-credibility-and-trust-in-information-systems.html Thu, 02 Oct 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In an era of information overload and rampant misinformation, time emerges as a critical factor in determining what information we trust. Traditional approaches to credibility tend to evaluate a… https://diniscruz.ai/2025/10/02/project-voice2siem-turning-customer-support-audio-into-real-time-security-events.html https://diniscruz.ai/2025/10/02/project-voice2siem-turning-customer-support-audio-into-real-time-security-events.html Thu, 02 Oct 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Phone-based social engineering and vishing (voice phishing) attacks are on the rise, targeting customer support and help desk agents. Attackers impersonate customers or executives to manipulate… https://diniscruz.ai/2025/09/01/next-generation-api-security-platform-semantic-graphs-genai-testing-ephemeral-environments-2025.html https://diniscruz.ai/2025/09/01/next-generation-api-security-platform-semantic-graphs-genai-testing-ephemeral-environments-2025.html Mon, 01 Sep 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Modern API security requires going beyond traditional scanning -- it must blend into the API testing lifecycle and leverage cutting-edge AI to map and probe complex behaviors. This white paper… https://diniscruz.ai/2025/09/01/dinis-cruz-research-on-api-security-2009-2025.html https://diniscruz.ai/2025/09/01/dinis-cruz-research-on-api-security-2009-2025.html Mon, 01 Sep 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) API security has been a persistent theme in Dinis Cruz's work, spanning early insights in 2009--2010 through to innovative ideas in 2025. His contributions center on how to test and analyze web… https://diniscruz.ai/2025/08/23/llm-workflows-stateflow-service-technical-brief.html https://diniscruz.ai/2025/08/23/llm-workflows-stateflow-service-technical-brief.html Sat, 23 Aug 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The LLM Workflows/Stateflow Service is a proposed stateless web service for executing AI-driven workflows with well-defined, deterministic steps. It acts as a state machine for orchestrating Large… https://diniscruz.ai/2025/08/23/personas-service-technical-llm-brief.html https://diniscruz.ai/2025/08/23/personas-service-technical-llm-brief.html Fri, 22 Aug 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The Personas Service (to be deployed at personas.prod.mgraph.ai) is a stateless microservice that leverages Large Language Models (LLMs) to translate and tailor content for specific target personas.… https://diniscruz.ai/2025/08/22/surrogate-dependencies-simulating-backends-for-offline-first-development.html https://diniscruz.ai/2025/08/22/surrogate-dependencies-simulating-backends-for-offline-first-development.html Fri, 22 Aug 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Modern software development often relies on remote APIs and services, yet developers frequently need to work in environments where those backends are unavailable or unstable. Surrogate dependencies… https://diniscruz.ai/2025/08/22/iterative-flow-development-ifd-methodology__javascript-web-application-implementation.html https://diniscruz.ai/2025/08/22/iterative-flow-development-ifd-methodology__javascript-web-application-implementation.html Fri, 22 Aug 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Generative AI (GenAI) is rapidly transforming software development, enabling new coding paradigms where human developers collaborate with Large Language Models (LLMs) as intelligent assistants. https://diniscruz.ai/2025/07/27/project-vulnai-ai-powered-vulnerability-risk-management-platform.html https://diniscruz.ai/2025/07/27/project-vulnai-ai-powered-vulnerability-risk-management-platform.html Sun, 27 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Organizations continue to struggle with a deluge of security vulnerabilities and alerts, but traditional vulnerability management approaches have failed to translate these findings into effective… https://diniscruz.ai/2025/07/06/semantic-knowledge-graphs-g3-and-sustainable-ai-aligning-innovations-with-esg-objectives.html https://diniscruz.ai/2025/07/06/semantic-knowledge-graphs-g3-and-sustainable-ai-aligning-innovations-with-esg-objectives.html Sun, 06 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In an era when organizations are increasingly accountable for the environmental, social, and governance (ESG) impacts of their technology, innovative approaches in data and AI engineering are… https://diniscruz.ai/2025/07/06/graph-based-cloud-iam-in-the-genai-agentic-world.html https://diniscruz.ai/2025/07/06/graph-based-cloud-iam-in-the-genai-agentic-world.html Sun, 06 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The rapid rise of generative AI agents – autonomous software powered by large language models (LLMs) – is redefining how applications interact with cloud services. These AI agents can dynamically… https://diniscruz.ai/2025/07/06/from-large-language-models-to-small-models-and-code-the-evolution-of-ai-solutions.html https://diniscruz.ai/2025/07/06/from-large-language-models-to-small-models-and-code-the-evolution-of-ai-solutions.html Sun, 06 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Large Language Models (LLMs) like GPT-3 and GPT-4 have revolutionized what machines can do with human language. These massive models (with hundreds of billions of parameters) stunned the world by… https://diniscruz.ai/2025/07/06/finding-the-good-enough-threshold-optimizing-risk-creativity-and-product-decisions.html https://diniscruz.ai/2025/07/06/finding-the-good-enough-threshold-optimizing-risk-creativity-and-product-decisions.html Sun, 06 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Every decision in business, creativity, or engineering comes with a trade-off between striving for perfection and delivering “good enough” at the right time. There is an optimal point at which… https://diniscruz.ai/2025/07/04/usage-based-billable-entities-aligning-saas-pricing-with-customer-usage.html https://diniscruz.ai/2025/07/04/usage-based-billable-entities-aligning-saas-pricing-with-customer-usage.html Fri, 04 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Software-as-a-Service (SaaS) companies have traditionally relied on fixed subscription plans – charging customers a monthly or annual fee for access to a product. However, this model often misaligns… https://diniscruz.ai/2025/07/04/the-joy-of-programming-in-the-age-of-ai-assisted-development.html https://diniscruz.ai/2025/07/04/the-joy-of-programming-in-the-age-of-ai-assisted-development.html Fri, 04 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In the software engineering community, the term “flow state” or being “in the zone” describes a peak experience of focus and creativity that makes programming deeply rewarding. A coder in this state… https://diniscruz.ai/2025/07/04/from-free-scraping-to-fair-compensation-cloudflares-genai-crawler-charges-and-the-future-of-news-monetization.html https://diniscruz.ai/2025/07/04/from-free-scraping-to-fair-compensation-cloudflares-genai-crawler-charges-and-the-future-of-news-monetization.html Fri, 04 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The rise of generative AI has upended the traditional relationship between content creators and aggregators. AI web crawlers now scrape vast amounts of text, news, and images to train large language… https://diniscruz.ai/2025/07/04/faq-evolving-semantic-graphs-and-ontologies-with-llms-and-mgraph-db.html https://diniscruz.ai/2025/07/04/faq-evolving-semantic-graphs-and-ontologies-with-llms-and-mgraph-db.html Fri, 04 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) This FAQ-style white paper addresses key technical questions about Dinis Cruz’s approach to building and evolving semantic knowledge graphs using Large Language Models (LLMs) and the MGraph-DB… https://diniscruz.ai/2025/07/03/llm-driven-gdpr-compliance-q-and-a-graph-technical-brief.html https://diniscruz.ai/2025/07/03/llm-driven-gdpr-compliance-q-and-a-graph-technical-brief.html Thu, 03 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) This project aims to build an interactive chatbot UI that guides a user through a series of questions about their organization’s GDPR practices, dynamically builds a knowledge graph from the answers… https://diniscruz.ai/2025/07/02/using-memory_fs-to-build-a-file-based-representation-of-the-gdpr-standard.html https://diniscruz.ai/2025/07/02/using-memory_fs-to-build-a-file-based-representation-of-the-gdpr-standard.html Wed, 02 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) This white paper presents a method for converting the General Data Protection Regulation (GDPR) text into a structured, file-based representation using the MemoryFS framework. Targeted at technical… https://diniscruz.ai/2025/07/02/ephemeral-genai-siem-a-serverless-graph-driven-approach-to-security-event-management.html https://diniscruz.ai/2025/07/02/ephemeral-genai-siem-a-serverless-graph-driven-approach-to-security-event-management.html Wed, 02 Jul 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Security Information and Event Management (SIEM) tools have long been central to enterprise defense, but traditional SIEMs struggle with scale, context, and cost. They often ingest massive volumes of… https://diniscruz.ai/2025/06/25/using-ephemeral-neo4j-instances-for-a-cybersecurity-risk-graph-scenario.html https://diniscruz.ai/2025/06/25/using-ephemeral-neo4j-instances-for-a-cybersecurity-risk-graph-scenario.html Wed, 25 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Graph thinkers – those who naturally conceptualize information as networks of nodes and relationships – can greatly benefit from on-demand graph analytics. Recently, we demonstrated how a Large… https://diniscruz.ai/2025/06/25/ephemeral-neo4j-instances-for-on-demand-graph-analytics.html https://diniscruz.ai/2025/06/25/ephemeral-neo4j-instances-for-on-demand-graph-analytics.html Wed, 25 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Organizations are increasingly seeking ways to perform complex graph data transformations and analytics without the overhead of maintaining long-running database servers. Neo4j – a leading graph… https://diniscruz.ai/2025/06/25/data-tests-for-neo4j-bringing-automated-testing-to-graph-databases.html https://diniscruz.ai/2025/06/25/data-tests-for-neo4j-bringing-automated-testing-to-graph-databases.html Wed, 25 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Neo4j’s flexible, schema-optional nature is a double-edged sword: it empowers rapid graph modeling but can lead to hidden data inconsistencies as the graph evolves. Data tests for Neo4j apply the… https://diniscruz.ai/2025/06/22/project-plan-high-street-genai-learning-hub.html https://diniscruz.ai/2025/06/22/project-plan-high-street-genai-learning-hub.html Sun, 22 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In many communities, there is a need for a "third space" – a place outside of home and work where people can gather, learn, and collaborate in a non-commercial, inclusive environment. As author Zadie… https://diniscruz.ai/2025/06/22/fist-meets-the-semantic-knowledge-graph-aligning-fast-inexpensive-simple-tiny-with-dinis-cruzs-g3-approach.html https://diniscruz.ai/2025/06/22/fist-meets-the-semantic-knowledge-graph-aligning-fast-inexpensive-simple-tiny-with-dinis-cruzs-g3-approach.html Sun, 22 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Modern engineering projects thrive on agility, thrift, and simplicity. These values are encapsulated in the FIST framework – Fast, Inexpensive, Simple, Tiny – originally coined in the defense… https://diniscruz.ai/2025/06/19/using-llms-as-ephemeral-graph-databases--empowering-the-graph-thinkers-in-the-age-of-generative-ai.html https://diniscruz.ai/2025/06/19/using-llms-as-ephemeral-graph-databases--empowering-the-graph-thinkers-in-the-age-of-generative-ai.html Thu, 19 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Graph thinkers – those who naturally conceptualize information as networks of nodes and relationships – are poised to benefit immensely from advances in generative AI. Traditional graph databases… https://diniscruz.ai/2025/06/19/empowering-workshops-with-custom-gpts-for-genai-training.html https://diniscruz.ai/2025/06/19/empowering-workshops-with-custom-gpts-for-genai-training.html Thu, 19 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) GenAI (Generative AI) has rapidly emerged as a transformative technology, yet many executives and professionals struggle to find practical entry points for its adoption. Often, the barrier is not… https://diniscruz.ai/2025/06/18/no-code-development--ndc--a-paradigm-shift-beyond-vibe-coding.html https://diniscruz.ai/2025/06/18/no-code-development--ndc--a-paradigm-shift-beyond-vibe-coding.html Wed, 18 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In recent years, advances in generative AI – especially large language models (LLMs) like GPT-4, Codex, and others – have ushered in a new style of software creation. Instead of writing syntax… https://diniscruz.ai/2025/06/18/empowering-the-graph-thinkers-in-the-age-of-generative-ai.html https://diniscruz.ai/2025/06/18/empowering-the-graph-thinkers-in-the-age-of-generative-ai.html Wed, 18 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In a world increasingly defined by complex interconnections, a unique set of individuals thrives on seeing relationships and patterns everywhere – the "graph thinkers." These are people who… https://diniscruz.ai/2025/06/18/comparing-the-eu-fed-cloud-vs-an-open-source-federated-cloud-proposal.html https://diniscruz.ai/2025/06/18/comparing-the-eu-fed-cloud-vs-an-open-source-federated-cloud-proposal.html Wed, 18 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The EU FED Cloud is a European initiative to build a federated, sovereign cloud ecosystem with built-in compliance and security. It's not a single public cloud provider, but a framework of multiple… https://diniscruz.ai/2025/06/18/bridging-niklas-luhmanns-ideas-with-semantic-knowledge-graphs-and-g3.html https://diniscruz.ai/2025/06/18/bridging-niklas-luhmanns-ideas-with-semantic-knowledge-graphs-and-g3.html Wed, 18 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Niklas Luhmann (1927–1998) was a renowned German sociologist and systems theorist, famous not only for his influential theory of social systems but also for his extraordinarily productive writing… https://diniscruz.ai/2025/06/16/workshop-plan-user-driven-semantic-persona-graphs-powered-by-genai.html https://diniscruz.ai/2025/06/16/workshop-plan-user-driven-semantic-persona-graphs-powered-by-genai.html Mon, 16 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) This workshop will demonstrate how to use Generative AI (GenAI) to build a personalized semantic knowledge graph for a user and then generate tailored outputs for different stakeholder personas. We… https://diniscruz.ai/2025/06/15/the-hidden-cost-of-ephemeral-testing-and-the-case-for-automation.html https://diniscruz.ai/2025/06/15/the-hidden-cost-of-ephemeral-testing-and-the-case-for-automation.html Sun, 15 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The key insight is that lack of visible tests doesn't mean testing isn't happening – it means testing is happening inefficiently. Developers practicing Ephemeral Test-Driven Development (ETDD)… https://diniscruz.ai/2025/06/15/personal-content-rights-protecting-individuals-in-the-age-of-deepfakes-and-ai-cloning.html https://diniscruz.ai/2025/06/15/personal-content-rights-protecting-individuals-in-the-age-of-deepfakes-and-ai-cloning.html Sun, 15 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The rise of generative AI has enabled anyone to clone voices, faces, and writing styles with startling realism. From fabricated videos of leaders to AI-generated voice scams, this technology is being… https://diniscruz.ai/2025/06/14/user-driven-semantic-persona-graphs-powered-by-genai.html https://diniscruz.ai/2025/06/14/user-driven-semantic-persona-graphs-powered-by-genai.html Sat, 14 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Modern organizations increasingly rely on knowledge graphs to model complex relationships between business entities, risks, and controls. However, building these graphs traditionally requires… https://diniscruz.ai/2025/06/13/technical-briefing-web-content-filtering-project.html https://diniscruz.ai/2025/06/13/technical-briefing-web-content-filtering-project.html Fri, 13 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) This technical briefing outlines the architecture and design of the Web Content Filtering Project, which aims to give users fine-grained control over the content they see as they browse the web. The… https://diniscruz.ai/2025/06/13/follow-up-technical-vision-optimizations-deployment-and-security.html https://diniscruz.ai/2025/06/13/follow-up-technical-vision-optimizations-deployment-and-security.html Fri, 13 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In our initial briefing, we outlined a web content filtering platform that acts as a proxy to intercept web pages and filter out disallowed content before rendering to users. The goal of such a… https://diniscruz.ai/2025/06/10/security-implications-of-the-model-context-protocol-mcp-and-the-need-for-robust-infrastructure.html https://diniscruz.ai/2025/06/10/security-implications-of-the-model-context-protocol-mcp-and-the-need-for-robust-infrastructure.html Tue, 10 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The Model Context Protocol (MCP) has emerged as a powerful open standard that enables Large Language Models (LLMs) to interface with external tools and data sources in a uniform way. By acting as a… https://diniscruz.ai/2025/06/10/explorers-villagers-and-town-planners-understanding-the-generative-ai-divide.html https://diniscruz.ai/2025/06/10/explorers-villagers-and-town-planners-understanding-the-generative-ai-divide.html Tue, 10 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In the generative AI (GenAI) community of mid-2025, a puzzling divide has emerged. On one side stand the enthusiastic explorers – pioneers who see GenAI as a technology that can be used everywhere… https://diniscruz.ai/2025/06/09/supercharging-appsec-threat-modeling-services-with-genai-and-semantic-graphs.html https://diniscruz.ai/2025/06/09/supercharging-appsec-threat-modeling-services-with-genai-and-semantic-graphs.html Mon, 09 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Application security (AppSec) consulting is on the cusp of a transformation driven by Generative AI (GenAI) and semantic knowledge graphs. By integrating these technologies, AppSec services companies… https://diniscruz.ai/2025/06/08/using-presentations-instead-of-cvs-in-hiring.html https://diniscruz.ai/2025/06/08/using-presentations-instead-of-cvs-in-hiring.html Sun, 08 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Conventional resumes or CVs often provide a flat, one-dimensional snapshot of a candidate. They are typically static lists of past job titles, dates, and bullet-point skills – which can be misleading… https://diniscruz.ai/2025/06/08/personalized-briefing-semantic-knowledge-graphs-dinis-cruz-kerstin-clessienne.html https://diniscruz.ai/2025/06/08/personalized-briefing-semantic-knowledge-graphs-dinis-cruz-kerstin-clessienne.html Sun, 08 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Kerstin Clessienne is an internationally experienced advisor in applied marketing technology and organizational strategy, who explicitly brands herself as a “Marketing Business Graph and Business AI… https://diniscruz.ai/2025/06/07/history-and-analysis-of-owasp-in-person-summits.html https://diniscruz.ai/2025/06/07/history-and-analysis-of-owasp-in-person-summits.html Sat, 07 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) The OWASP in-person summits are intensive, collaborative gatherings of the Open Web Application Security Project’s community. These summits (distinct from regular OWASP conferences) bring together… https://diniscruz.ai/2025/06/07/genai-legacy-code-refactoring-business-plan.html https://diniscruz.ai/2025/06/07/genai-legacy-code-refactoring-business-plan.html Sat, 07 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) GenAI Legacy Code Refactoring is a SaaS company dedicated to modernizing and refactoring legacy software codebases using generative AI (GenAI), human expertise, and automated workflows. Our platform… https://diniscruz.ai/2025/06/06/personalised-briefing-for-dan-raywood-on-the-future-of-news.html https://diniscruz.ai/2025/06/06/personalised-briefing-for-dan-raywood-on-the-future-of-news.html Fri, 06 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) This executive briefing is a synthesis of hundreds of pages of research by Dinis Cruz (primarily from The Future of News and the Monetisation of Trust report and related documents on… https://diniscruz.ai/2025/06/03/proposal-strategic-aws-partnership-with-dinis-cruz-genai-and-graph-innovations.html https://diniscruz.ai/2025/06/03/proposal-strategic-aws-partnership-with-dinis-cruz-genai-and-graph-innovations.html Tue, 03 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Dinis Cruz is a seasoned cybersecurity technologist and researcher who has spent over six years building advanced solutions on Amazon Web Services (AWS). He has a proven track record of leveraging… https://diniscruz.ai/2025/06/03/proposal-for-neo4j-collaboration-with-dinis-cruz.html https://diniscruz.ai/2025/06/03/proposal-for-neo4j-collaboration-with-dinis-cruz.html Tue, 03 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Dinis Cruz is a seasoned cybersecurity expert and innovator with a long-standing relationship with Neo4j, marked by years of advocacy for graph technologies. He brings over two decades of experience… https://diniscruz.ai/2025/06/03/jira-as-a-graph-database–proposal-for-atlassian-executives.html https://diniscruz.ai/2025/06/03/jira-as-a-graph-database–proposal-for-atlassian-executives.html Tue, 03 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Dinis Cruz is a seasoned technology leader and Atlassian expert with over a decade of experience pushing Jira beyond traditional use cases. He has pioneered research and practical implementations of… https://diniscruz.ai/2025/06/02/linking-threat-models-with-semantic-business-graphs.html https://diniscruz.ai/2025/06/02/linking-threat-models-with-semantic-business-graphs.html Mon, 02 Jun 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Threat modeling is traditionally a technical exercise: security architects enumerate assets, diagram data flows, identify threats/vulnerabilities, and recommend mitigations. Often, the output is a… https://diniscruz.ai/2025/05/30/using-threat-modeling-and-semantic-graphs-to-secure-the-digital-supply-chain.html https://diniscruz.ai/2025/05/30/using-threat-modeling-and-semantic-graphs-to-secure-the-digital-supply-chain.html Fri, 30 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Modern organizations rely on complex digital supply chains comprising not only their own systems, but countless third-party components and service providers. Each link in this chain – from… https://diniscruz.ai/2025/05/30/scaling-supply-chain-security-using-threat-modeling-semantic-knowledge-graphs-and-maps.html https://diniscruz.ai/2025/05/30/scaling-supply-chain-security-using-threat-modeling-semantic-knowledge-graphs-and-maps.html Fri, 30 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) In today’s interconnected software ecosystem, digital supply chain security has become a critical challenge. Modern applications rely on countless third-party components and services, yet buyers and… https://diniscruz.ai/2025/05/30/graphs-of-graphs-of-graphs-g3-in-threat-modeling.html https://diniscruz.ai/2025/05/30/graphs-of-graphs-of-graphs-g3-in-threat-modeling.html Fri, 30 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Modern cybersecurity architectures are highly complex, with myriad components, third-party services, and evolving threat landscapes. Traditional threat modeling approaches – often static diagrams or… https://diniscruz.ai/2025/05/29/threat-models-as-mandatory-disclosures__a-vision-for-security-transparency.html https://diniscruz.ai/2025/05/29/threat-models-as-mandatory-disclosures__a-vision-for-security-transparency.html Thu, 29 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz)threat-modelingtransparencydisclosure Argues that publishing threat models improves security transparency. https://diniscruz.ai/2025/05/29/semantic-knowledge-graphs-for-llm-driven-source-code-analysis.html https://diniscruz.ai/2025/05/29/semantic-knowledge-graphs-for-llm-driven-source-code-analysis.html Thu, 29 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz)knowledge-graphssource-codellmanalysis Using knowledge graphs and large language models for analyzing source code. https://diniscruz.ai/2025/05/29/advancing-threat-modeling-with-semantic-knowledge-graphs.html https://diniscruz.ai/2025/05/29/advancing-threat-modeling-with-semantic-knowledge-graphs.html Thu, 29 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz)threat-modelingknowledge-graphscybersecurity Shows how semantic knowledge graphs enhance threat modeling practices. https://diniscruz.ai/2025/05/27/lets__load-extract-transform-save__a-deterministic-and-debuggable-data-pipeline_architecture.html https://diniscruz.ai/2025/05/27/lets__load-extract-transform-save__a-deterministic-and-debuggable-data-pipeline_architecture.html Tue, 27 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz)data-pipelinearchitecturedeterministicdebugging Outline of a deterministic, debuggable data pipeline architecture. https://diniscruz.ai/2025/05/22/technical-debrief__evolution-from-electron-based-to-python-native-web-content-capture-app.html https://diniscruz.ai/2025/05/22/technical-debrief__evolution-from-electron-based-to-python-native-web-content-capture-app.html Thu, 22 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz)technical-debriefpythonelectronweb-content Lessons learned migrating a web capture tool from Electron to Python. https://diniscruz.ai/2025/05/21/project__electron-based-web-content-capture-app-with-playwright-and-python.html https://diniscruz.ai/2025/05/21/project__electron-based-web-content-capture-app-with-playwright-and-python.html Wed, 21 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz) Following the failed attempt to implement the Project: Web Content Capture Extension with Pyodide and Serverless Backend this version creates a desktop app https://diniscruz.ai/2025/05/18/security-debrief__openai_chatgpt_connector_gitHub_app.html https://diniscruz.ai/2025/05/18/security-debrief__openai_chatgpt_connector_gitHub_app.html Sun, 18 May 2025 09:00:00 +0000 noreply@diniscruz.ai (Dinis Cruz)securitygithubchatgptconnector Analyzes security implications of the ChatGPT Connector GitHub app.