PortVis: A tool for port-based detection of security events

VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security

Volumn , Issue , 2004, Pages 73-81

  McPherson, Jonathan ^a   Ma, Kwan Liu ^a   Krystosk, Paul ^b   Bartoletti, Tony ^b   Christensen, Marvin ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b LAWRENCE LIVERMORE NATIONAL LABORATORY   (United States)

Author keywords

Information visualization; Network security; User interfaces

Indexed keywords

BORDER GATEWAY PROTOCOL (BGP); INFORMATION VISUALIZATION; INTERNET PROTOCOL (IP); NETWORK SECURITY;

COMPUTER VIRUSES; COMPUTER WORMS; DATABASE SYSTEMS; ENCODING (SYMBOLS); GATEWAYS (COMPUTER NETWORKS); INTERNET; NETWORK PROTOCOLS; SELF ORGANIZING MAPS; TELECOMMUNICATION TRAFFIC; USER INTERFACES;

SECURITY OF DATA;

EID: 20444495766     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Richard A. Becker, Stephen G. Eick, and Allan R. Wilks. Visualizing network data. IEEE Transactions on Visualization and Computer Graphics, 1(1):16-28, 1995.
2. P. Dokas, L. Ertoz, V. Kumar, A. Lazarevic, J. Srivastava, and P. Tan. Data mining for network intrusion detection. In Proc. NSF Workshop on Next Generation Data Mining, 2002.
3. Robert F. Erbacher. Visual traffic monitoring and evaluation. In Proceedings of the Conference on Internet Performance and Control of Network Systems II, pages 153-160, 2001.
4. Deborah Estrin, Mark Handley, John Heidemann, Steven McCanne, Ya Xu, and Haobo Yu. Network visualization with NAM, the VINT network animator. Computer, 33(11), 2000.
5. L. Girardin and D. Brodbeck. A visual approach for monitoring logs. In Proceedings of the 12th Usenix System Administration conference, pages 299-308, 1998.
6. Teuvo Kohonen. Self-Organization and Associative Memory. Springer-Verlag, Berlin, 3rd edition, 1989.
7. Kiran Lakkaraju, Ratna Bearavolu, and William Yurcik. NVisionIP-a traffic visualization tool for security analysis of large and complex networks. In International Multiconference on Measurement, Modelling, and Evaluation of Computer-Communications Systems (Performance TOOLS), 2003.
8. Stephen Lau. The spinning cube of potential doom. Communications of the ACM, 47(6):25-26, 2004.
9. K. Mundiandy. Case study: Visualizing time related events for intrusion detection. In Proceedings of the IEEE Symposium on Information Visualization 2001, pages 22-23, 2001.
10. Leonid Portnoy, Eleazar Eskin, and Salvatore J. Stolfo. Intrusion detection with unlabeled data using clustering. In Proceedings of ACM CSS Workshop on Data Mining Applied to Security (DMSA-2001), 2001.
11. S. Staniford, V. Paxson, and N. Weaver. How to own the internet in your spare time. In Proceedings of the 2002 Usenix Security Symposium, 2002.
12. Soon Tee Teoh, Kwan-Liu Ma, S. Felix Wu, and Xiaoliang Zhao. Case study: Interactive visualization for internet security. In Proc. IEEE Visualization, 2002.
13. F. W. Young and R. M. Hamer. Multidimensional Scaling: History, Theory and Applications. Erlbaum, New York, 1987.
14. William Yurcik, James Barlow, Kiran Lakkaraju, and Mike Haberman. Two visual computer network security monitoring tools incorporating operator interface requirements. In ACM CHI Workshop on Human-Computer Interaction and Security Systems (HCISEC), 2003.