Equitus Intelligence Stack (Arcxa, KGNN, EVS, Fusion, and ICAM) with Cyberspatial’s Teleseer & Scout passive network discovery platforms, AIMLUX provides a unified master licensing platform under a Service as Software (SAS) model.
AIMLUX directly tackles aim at the root cause of project failure in enterprise security: disjointed data silos, brittle manual ETL pipelines, and severe audit/compliance vulnerabilities.
AIMLUX Architecture Prevents Failure:
No ETL Bottlenecks: Arcxa’s SQL-to-SPARQL mapping eliminates months of manual database integration work.
Zero Cloud Vulnerability: All video processing (EVS) and packet inspection (Teleseer) happened locally on-premise, preserving network bandwidth and data sovereignty.
Deterministic Accuracy: KGNN and Arcxa provide explainable, rule-and-graph-backed logic, eliminating the "black-box" false positives common in traditional AI tools.
_______________________________________________________________________
SECTION I - AIMLUX BENEFITS
1. Eliminating Silos & Brittle ETL Pipelines
Traditional security integrations break because connecting legacy access controls, physical security cameras, and IT network switches typically requires custom "glue code" or brittle middleware.
Layer 2/3 Wire Truth (Teleseer & Scout): Instead of manually inventorying IT/OT assets or installing intrusive agents, Teleseer sniffs network traffic off the wire or uses portable Scout sensors to construct an exact, agentless baseline map of all active devices.
No ETL Disruption (Arcxa): Arcxa automatically maps tabular relational databases (access control logs, HR badges, asset registries) into standardized 3-column Subject-Predicate-Object (SPO) semantic structures without rewriting source database schemas.
Unified Correlation (Fusion + KGNN): Equitus Fusion ingests the Teleseer network wire map alongside EVS video logs and ICAM access badges. KGNN correlates these into a real-time semantic knowledge graph without requiring heavy cloud compute or GPU arrays.
2. Unlocking High-Margin Value for Systems Integrators (SIs)
For Systems Integrators, traditional projects frequently suffer from low margins caused by unpredictable scope creep, unbillable integration troubleshooting, and audit delays
.
Turnkey Rapid Deployment: By using Cyberspatial Scout kits to perform instant field assessments alongside standardized Equitus deployment pipelines, SIs reduce proof-of-concept timelines to as little as 21 days.
Reusable Asset Libraries: Data ontologies and device topology profiles built for one enterprise deployment can be saved into an internal asset library, turning custom integration labor into a repeatable, high-margin software delivery workflow.
Monetizable Compliance Audit Packages: Because Arcxa attaches cryptographic lineage to data transformations, SIs can package and bill for pre-packaged, cryptographically verifiable compliance reports (e.g., NERC CIP, CJIS, HIPAA).
3. Delivering Complete Local Control for IT Teams
IT teams are often reluctant to integrate physical security systems due to fear of cloud bandwidth strain, third-party data leaks, or operational disruption on live OT networks.
100% On-Premises & Edge Execution: Cyberspatial Teleseer passively monitors traffic without sending packets onto the live network, while Equitus EVS and KGNN run locally on standard hardware (such as RHEL/OpenShift on Dell or IBM servers).
Sensitive video archives and packet captures remain entirely inside the corporate perimeter. Zero-Agent Coexistence: Neither Teleseer nor Equitus requires endpoint agents, preventing system crashes or compliance violations on legacy industrial control or building automation hardware.
4. Deterministic Governance & Risk Reduction for CTOs
For the CTO, convergence provides total situational awareness and eliminates the unpredictable costs of usage-based cloud models or pilot churn.
Unified Cyber-Physical Threat Scenarios: If an unauthorized badge swipe occurs (ICAM), EVS instantly flags the camera feed at that specific door, while Teleseer monitors if a new IP address or rogue MAC address simultaneously appears on the local switch.
KGNN automatically links these three events into a single actionable threat alert. Deterministic Lineage & Proof: Unlike probabilistic "black box" AI, Arcxa and KGNN maintain an 8-point value-level context with cryptographic proof for every data point. CTOs can definitively prove who touched an asset, where they were physically, and what network traffic resulted.
Predictable Financial Model: Under AIMLUX’s SAS master licensing model, enterprises avoid runaway usage meters, benefiting from transparent software rights or fixed-lease licensing structures.
AIMLUX eliminates the root causes of project failure (brittle integration, missing context, and data silos), it helps to trace a single, high-stakes event through the master-licensed Cyberspatial + Equitus stack.
Imagine a sophisticated hybrid cyber-physical intrusion attempt: An attacker plugs an unauthorized device into an open Ethernet port in a restricted server room while trying to bypass an electronic door lock using a compromised employee badge.
Here is the step-by-step technical workflow of how Teleseer, EVS, Arcxa, and KGNN handle this incident without a single custom ETL script or cloud data leak.
Phase 1: Passive Discovery & Edge Detection (The Ingestion Layer)
AIMLUX system detects the physical and digital anomalies simultaneously at the edge, locally and agentlessly.
Cyberspatial Teleseer (Wire-Level Network Detection):
Action: Teleseer is passively monitoring network switches via SPAN ports or inline hardware (Scout) in the server room.
Execution: It instantly decodes the Layer 2/3 wire traffic, recognizes a new MAC address attempting a DHCP handshake, and identifies it as an unauthorized Raspberry Pi or rogue rogue packet-sniffer—without needing an agent installed on the device.
Equitus Video Sentinel / EVS (Computer Vision Edge Detection):
Action: Simultaneously, the camera overlooking the server room rack runs EVS locally on the edge server.
Execution: EVS detects an individual lingering near the open rack longer than authorized or detects an abnormal motion pattern, indexing the video frame and tagging it with precise timestamp and spatial metadata.
Phase 2: Semantic Harmonization & Context Mapping (The Control Plane)
Traditional integrations fail here because the network alert (Teleseer) and the video log (EVS) speak entirely different data languages. AIMLUX solves this via Arcxa.
Equitus Arcxa (Semantic Control Plane):
Action: Arcxa acts as the non-intrusive sidecar engine. It ingests the raw syslog/packet alert from Teleseer, the bounding-box metadata from EVS, and access logs from ICAM (Identity, Credential, and Access Management).
Execution: Without writing a single line of custom ETL code or altering underlying database schemas, Arcxa translates these disparate data formats into an instantaneous Subject-Predicate-Object (SPO) triple format. It maps:
[Employee Badge A] ---> Swiped Door B ---> At Timestamp T.
[Rogue MAC Address C] ---> Connected to Port D ---> At Timestamp T.
[Camera Feed E] ---> Captured Subject X near Rack ---> At Timestamp T.
Phase 3: Neural Correlation & Threat Synthesis (The Intelligence Layer)
Instead of triggering two separate, disconnected alerts (one for IT security, one for physical security), the system synthesizes a unified reality.
Equitus KGNN (Knowledge Graph Neural Network):
Action: The KGNN ingests the semantic triples generated by Arcxa.
Execution: Using non-GPU neural graph processing, KGNN cross-correlates the physical proximity event (Badge swipe + EVS video match) with the digital anomaly (Teleseer wire discovery) occurring at the exact same geographic/temporal coordinate.
Result: It calculates that the badge swipe belongs to an employee whose digital user account is logged in 50 miles away at headquarters—proving the physical badge is being spoofed or used by an unauthorized tailgater at the exact moment a rogue network device was plugged in.
Phase 4: Cryptographic Governance & Automated Response (The Output)
Traditional projects break down during post-incident audits because teams cannot prove data integrity or trace how an alert was triggered. AIMLUX delivers deterministic proof.
Action and Audit Trail:
Unified Security Operations (via Equitus Fusion): A single high-priority incident card pops up on the SOC operator's screen, combining the live EVS camera playback, the Teleseer packet capture summary, and the ICAM badge status.
Cryptographic Lineage (Arcxa): Every data transformation step—from the raw packet sniff to the graph correlation—is stamped with an 8-point value-level context and cryptographic proof.
Compliance Readiness: If auditors request an investigation report, the system exports a mathematically verifiable audit package proving exact chain-of-custody for every data point, satisfying frameworks like NERC CIP or CJIS instantly.













