A visualization tool for situational awareness of tactical and strategic security events on large and complex computer networks

Proceedings - IEEE Military Communications Conference MILCOM

Volumn 2, Issue , 2003, Pages 850-855

  Bearavolu, R ^a   Lakkaraju, K ^a   Yurcik, W ^a   Raje, H ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Anomaly detection; Computer network security; Intrusion detection; NetFlows; Situational awareness

Indexed keywords

DATA MINING; KNOWLEDGE ACQUISITION; PROBLEM SOLVING; SECURITY OF DATA; TELECOMMUNICATION TRAFFIC; WORLD WIDE WEB;

ANOMALY DETECTION; COMPUTER NETWORK SECURITY; INTRUSION DETECTION; NETFLOWS; SITUATIONAL AWARENESS;

COMPUTER NETWORKS;

EID: 3142657520     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (17)

1. Barford, P., and D. Plonka. Characteristics of Network Traffic Flow Anomalies, ACM SIGCOMM Internet Measurement Workshop, 2001.
2. Bullard, C. Audit Record Generation and Utilization System (Argus), 〈http://www.qosient.com/argus/〉 and 〈ftp://ftp.andrew.cmu.edu/ pub/argus〉
3. Cisco Systems. NetFlow Services and Applications, White Paper. 1999. 〈http://www.cisco.com/warp/public/cc/pd/iosw/iof t/neflct/tech/napps_wp. htm〉
4. Data-to-Knowledge (D2K) Ref. Manual, NCSA, 2001. 〈http://archive. ncsa.uiuc.edu/ALG/d2k/〉
5. Dodge, M., R. Kitchin, Atlas of Cyberspace, Addison-Wesley, 2001.
6. Dunn J. Security Applications for Cisco NetFlow Data, SANS Institute, 2001. 〈http://www.sans.org/rr/software/netflow.php〉
7. Estrin D. et al., Network Visualization with Nam, the VINT Network Animator, IEEE Computer, Nov. 2000, pp. 63-68.
8. Fullmer, M. and S. Romig. The OSU Flow-tools Package and Cisco NetFlow Logs, 14th Systems Admin. Conf. (LISA) Usenix, 2000, pp. 291-303.
9. Haberman, M. et. al. flowBoy: An Object-Oriented Framework for Generic Network Flow Management, Passive/Active Measuremt. (PAM) Workshop, 2000.
10. Henning, R., K. Fox, The Network Vulnerability Tool (NVT) - A System Vulnerability Visualization Architecture, National Information Systems Security Conference (NISSC), 1999.
11. Hosmer, H., Visualizing Risks: Icons for Information Attack Scenarios, National Information Systems Security Conference (NISSC), 2000.
12. Navarro, J-P. et al. Combining Cisco NetFlow Exports with Relational Database Technology for Usage Statistics, Intrusion Detection, and Network Forensics, 14th Systems Admin. Conf. (LISA) Usenix, 2000, pp. 285-290.
13. Plonka, D. FlowScan: A Network Traffic Flow Reporting and Visualization Tool, 14th Systems Administration Conference (LISA) Usenix, 2000.
14. Sommer, R. and A. Feldmann. NetFlow: Information Loss or Win? ACM SIGCOMM Internet Measurement Workshop (IMW), 2002.
15. Teoh, S. et al. Case Study: Interactive Visualization For Internet Security, IEEE Visualization, 2002.
16. TowerView Security 〈http://www.hightowersecurity.com/〉
17. P. Varner and J. Knight, Security Monitoring, Visualization, and System Survivability, IEEE/SEI Information Survivability Workshop (ISW), 2001.