Stream Processing for Cybersecurity: Threat Detection in Real Time
Edge computing processes data at or near the source — IoT devices, cell towers, retail stores — rather than sending everything to the cloud. Stream processing at the edge enables low-latency decisions without round-trip cloud latency.
Edge + Cloud Architecture
Edge Devices → Edge Stream Processor → Local Actions (milliseconds)
↓
Aggregate to Cloud
↓
Cloud Stream Processor (RisingWave) → Global Analytics
Use Cases
| Use Case | Edge Processing | Cloud Processing |
| Autonomous vehicles | Obstacle detection (<10ms) | Fleet analytics |
| Manufacturing | Equipment anomaly detection | Predictive maintenance |
| Retail | In-store personalization | Cross-store analytics |
| 5G/Telco | QoS monitoring | Network optimization |
RisingWave in Edge Architecture
RisingWave serves as the cloud aggregation layer — receiving pre-filtered events from edge processors, computing global materialized views, and serving analytics via PostgreSQL protocol.
Frequently Asked Questions
Can RisingWave run at the edge?
RisingWave is designed for cloud/server deployment, not edge devices. For edge processing, use lightweight tools (Pulsar Functions, AWS Greengrass). Use RisingWave as the central cloud processor for aggregated edge data.

