Threat Intelligence Tables

Senior Product designer

Safebraech

Introduction

SafeBreach is a cybersecurity company based in Sunnyvale, California and Tel Aviv, Israel. SafeBreach developed a platform that simulates hacker breach methods, running continuous "war games" to identify breach scenarios across network systems.

One product

Two platforms

SafeBreach provides two platforms to help customers identify potential security issues and strengthen their security posture by simulating attacks on their systems before real attackers can exploit them.

Role Analysis

Job Level

Role title - IT security specialist
Reports to chief information security officer (CISO). Does not have direct reports

System Competency

High familiarity with SafeBreach and other B2B security systems. Very high proficiency in complex digital systems.

Task Analysis

Select the most relevant attacks from the Playbook table by using the filters.
Create custom scenarios composed of several attacks by using the The Studio.
Run simulations of these attacks on the company's system to identify vulnerabilities.
Address the company's security weaknesses based on the simulation reports.

tools

SafeBreach, alongside other information security products, forms a comprehensive defense system, protecting the company's security from various angles.

Required Skills and Knowledge

High technological capabilities.
Strong analytical skills.
Bachelor's degree in Computer Science.
Ability to work with multiple systems simultaneously.
Ability to prioritize tasks.
Up-to-date with various information security breach methods. High baseline requirements. Advanced technical operation skills

Role-Related Goals

Protect the organization's information security. Defend the organization against cyberattacks. Proactively prevent potential breaches. Anticipate and test potential breach scenarios in the system. Prevent potential security breaches and stay a step ahead of attackers.

Challenges

Juggling multiple security systems to protect the company from various threats leaves the user with limited time (approx. 15 minutes weekly) for SafeBreach. High learning curve of SafeBreach.

Playbook Table

This platform offers a vast database of pre-built attacks that users can filter and select from to test their systems for vulnerabilities. Users can filter and select attacks that fit their needs from a table view and then run them on their systems to test for vulnerabilities.

The Problem

Many tables, Each with similar functionality but a different look and feel.

The product is primarily composed of tabular screens, which make up 70% of its content and come in a variety of forms and styles. While these tables may share similar functionalities like search, filtering, and information display, each one has a significantly different look and feel.

The Impact

Difficulty navigating, High learning curve

The lack of standardization and uniformity across these tables makes it difficult for users to navigate, increasing their learning time and creating a sense of complexity within a system that already has a complex content landscape.

The Challenge

Unifying the User Experience Across Varied Tabular Screens

Find a way to unify the user experience across the many tables, despite their varied visual design and functionality, and establish a design system that defines all the atoms and components of the new design.

User flow

THE MAIN PROBLEM 01

Accessing Detailed Info Efficiently

Before

Users needed to constantly switch between the table and details screens, slowing down their ability to assess information relevance.

After

Introduced a "peek" feature allowing users to view a summary in a side panel without leaving the table, improving efficiency and decision-making speed.

THE MAIN PROBLEM 02

Optimizing Filter System

problem

Confusing and inconsistent filter placement and behavior across screens, slowing user workflow.
After filtering, many irrelevant results are still displayed

Solution

Implemented a uniform filtering system with instant updates, prominently displayed common filters, and visual cues for active filters. Enhanced user feedback with saved settings and result counts, streamlining the filtering process and improving efficiency.

Design Process

Final Design

Right panel - Streamlining Information Access

“Load more” + Infinite scroll

Multi selection

Filters

Full demo

01 The challenge

Problem

Users had difficulty in recognizing the selection, orienting themselves within the Studio, understanding the purpose of the bubbles, and navigating the left tree. They were also confused by the disabled "test scenario" button, the unclear functionality of the "Start" button, and the multiple names for the same action.

Solutions

To address these issues, I added an indication in the tree when a bubble is clicked and highlighted the relevant bubble when a step is clicked, creating a visual connection between the two. I also emphasized animations to show connections, such as highlighting the row in the left tree when a bubble is clicked, highlighting the bubble itself, and opening the relevant panel. I added a small map to show the overall structure of the Studio and made the upper part sticky to the top of the screen to maintain orientation.

To reduce the size of the bubbles and remove irrelevant information, while narrowing and reducing the tabs on the sides, the left tab now opens only when a problem is clicked to save screen space and link the bubbles to the left panel. I added an indicator to show whether steps were successful, added tooltips to explain problems, and enabled expansion to find solutions.

I added button features such as hover mode and activation, and linked it with an icon in the left panel. I also renamed it from "Start" to "Scenario" to clarify its function. I divided the tree into three levels, adding an "Attack" icon on the third level to improve clarity. Finally, I suggested changing "Run Test" to "Run Scenario" to avoid confusing users, as they are the same action. I also renamed the "Test Scenario" button