Scatter (and other) plots for visualizing user profiling data and network traffic

VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security

Volumn , Issue , 2004, Pages 119-123

  Goldring, Tom ^a  

^a NATIONAL SECURITY AGENCY   (United States)

Author keywords

Visualization

Indexed keywords

COMPUTER NETWORKS; COMPUTER OPERATING SYSTEMS; COMPUTER VISION; CORRELATION METHODS; GRAPH THEORY; MATRIX ALGEBRA; TEXT PROCESSING; VECTORS; VISUALIZATION; WORD PROCESSING;

INDEX NUMBERS; NETWORK TRAFFIC; SCATTERPLOTS; USER PROFILING;

SECURITY OF DATA;

EID: 20444505708     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1029208.1029227     Document Type: Conference Paper

References (19)

1. ftp://ftp.njit.edu/pub/manikopo/data.
2. www.ll.mit.edu/IST/ideval/data/data_index.html.
3. Joint work with m. s. postol.
4. Renoir: General network visualization and manipulation program. http://www.nsa.gov/techtrans/techt00013.cfm.
5. B. Davison and H. Hirsch. Predicting sequences of user actions. In AAAI/ICML 1998 Workshop on Predicting the Future, 1998.
6. K. DeVault, N. Tucey, and D. Marchette. Analyzing process table and window title data for user identification in a windows environment. Naval Surface Warfare Center, NSWCDD/TR-03/122, 2004.
7. T. Goldring. Authenticating users by profiling behavior. In ICDM Workshop on Data Mining for Computer Security. Melbourne, Florida, November 2003.
8. Javitz and Valdes. The nides statistical component description and justification. http://www.sdl.sri.com/projects/nides/reports/statreport.ps.gz.
9. T. Lane and C. E. Brodley. Sequence matching and learning in anomaly detection for computer security. In AAAI-97 Workshop on AI Approaches to Fraud Detection and Risk Management Providence, RI, 1997.
10. Y. Liao. Windows nt user profiling with support vector machines. In Proc. 2002 UC Davis Student Workshop on Computing, Technical Report CSE-2002-28. Dept. of Computer Science, UC Davis, 2002.
11. D. Marchette. Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint. Springer Verlag, 2001.
12. R. Maxion and K. Tan. Anomaly detection in embedded systems. IEEE Transactions on Computers, 51(2), February 2002.
13. R. Maxion and T. Townsend. Masquerade detection using truncated command lines. In International Conference on Dependable Systems and Networks. Washington, D.C., June 2002.
14. P. Reiher. File profiling for insider threats. Sensors Directorate, Air Force Research Laboratory, AFRL-SN-WP-TR-2002-1102, 2002.
15. J. Shavlik, M. Shavlik, and M. Fahland. Evaluating software sensors for actively profiling windows 2000 computer users. In Fourth International Symposium on Recent Advances in Intrusion Detection. Davis, CA, 2001.
16. T. Spyrou and J. Darzentas. Intention modeling: Approximating computer user intentions for detection and prediction of intrusions. In S. K. Katsikas and D. Gritzalis (eds.), Information Systems Security: Facing the Information Society of the 21'st Century.
17. D. Swayne, D. Cook, A. Buja, and D. Lang. ggobi manual. http://www.ggobi.org/manual.pdf, 2003.
18. K. Tan and R. Maxion. Why 6? defining the operational limits of stide, an anomaly-based intrusion detector. In IEEE Symposium on Security and Privacy. Oakland, CA, May 2002.
19. M. Theus and M. Schonlau. Intrusion detection based on structural zeroes. Statistical Computing & Graphics Newsletter, 9(1):12-17, 1998.