Visual exploration of malicious network objects using semantic zoom, interactive encoding and dynamic queries

IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

Volumn , Issue , 2005, Pages 83-90

  Conti, Gregory ^a   Grizzard, Julian ^a   Ahamad, Mustaque ^a   Owen, Henry ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Binary navigation; Binary object visualization; Network visualization; Packet visualization; Payload visualization; Reverse engineering

Indexed keywords

BINARY NAVIGATION; BINARY OBJECT VISUALIZATION; NETWORK VISUALIZATION; PACKET VISUALIZATION; PAYLOAD VISUALIZATION;

BINARY SEQUENCES; DATA PROCESSING; PACKET NETWORKS; QUERY LANGUAGES; REVERSE ENGINEERING; SEMANTICS; SIGNAL ENCODING;

INTERACTIVE COMPUTER SYSTEMS;

EID: 33645218144     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/VIZSEC.2005.1532069     Document Type: Conference Paper

References (33)

1. Tom Goldring. "Scatter (and other) Plots for Visualizing User Profiling Data and Network Traffic," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
2. Jonathan McPherson, Kwan-Liu Ma, Paul Krystosek, Tony Bartoletti, Marvin Christensen. "PortVis: A Tool for Port-Based Detection of Security Events" ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
3. Kiran Lakkaraju, William Yurcik, Adam Lee, Ratna Bearavolu, Yifan Li, and Xiaoxin Yin. "NVisionIP: NetFlow Visualizations of System State for Security Situational Awareness," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
4. Marchette, D. Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint, Springer, 2001.
5. Soon Tee Teoh, T. J. Jankun-Kelly, Kwan-Liu Ma, and S. Felix Wu. "Visual Data Analysis for Detecting Flaws and Intruders in Computer Network Systems," IEEE Computer Graphics and Applications, IEEE Computer Society Press, September/October, 2004.
6. Xiaoxin Yin, William Yurcik, Michael Treaster, Yifan Li and Kiran Lakkaraju. "VisFlowConnect: NetFlow Visualizations of Link Relationships for Security Situational Awareness," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
7. Robert Erbacher, Kenneth Walker and Deborah Frincke. "Intrusion and Misuse Detection in Large-Scale Systems," Computer Graphics and Applications, Vol. 22, No. 1, January/February 2002, pp. 38-48.
8. Tamara Munzner. "Interactive Visualization of Large Graphs and Networks," Ph.D. dissertation, Stanford University, June 2000.
9. The Cooperative Association for Internet Data Analysis (CAIDA). http://www.caida.org/.
10. Eleftherios Koutsofios, Stephen North, Russell Truscott, Daniel Keim. "Visualizing large-scale telecommunication networks and services (case study)," IEEE Visualization, 1999.
11. Hideki Koike and Kazuhiro Ohno. "SnortView: Visualization System of Snort Logs," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
12. Graphviz - Graph Visualization Software, http://www.graphviz.org/.
13. Etherape: A Graphical Network Monitor. http://etherape.sourceforge.net/.
14. Anita Komlodi, John Goodall and Wayne Lutters. "An Information Visualization Framework for Intrusion Detection," ACM Conference on Human Factors in Computing Systems (ACM CHI), 2004.
15. Robert Ball, Glenn Fink, Anand Rathi, Sumit Shah, and Chris North. "Home-Centric Visualization of Network Traffic for Security Administration," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
16. William Yurcik, James Barlow, Kiran Lakkaraju, and Mike Haberman. "Two Visual Computer Network Security Monitoring Tools Incorporating Operator Interface Requirements," ACM CHI Workshop on Human-Computer Interaction and Security Systems (HCISEC), 2003.
17. Edwin Blake. "An Extended Platter Metaphor for Effective Reconfigurable Network Visualization," 8th International Conference on Information Visualisation (IV), 2004.
18. Benjamin Bederson and James Hollan. "Pad++: a zooming graphical interface for exploring alternate interface physics," ACM Symposium on User Interface Software and Technology (UIST), 1994.
19. Christopher Williamson and Ben Shneiderman. "The dynamic Home-Finder: evaluating dynamic queries in a real-estate information exploration system," ACM Conference on Research and Development in Information Retrieval (SIGIR), 1992.
20. Stefan Axelsson. "Combining a Bayesian Classifier with Visualisation: Understanding the IDS," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
21. Snort: the de facto standard for intrusion detection/prevention. http://www.snort.org/.
22. Ethereal: A Network Protocol Analyzer, http://www.ethereal.com/.
23. Ke Wang and Salvatore Stolfo. "Anomalous Payload-based Network Intrusion Detection," Seventh International Symposium on Recent Advances in Intrusion Detection, 2004.
24. InSeon Yoo. "Visualizing Windows Executable Viruses Using Self-Organizing Maps," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
25. IDA Pro Disassembler - multi-processor, windows hosted disassembler and debugger, http://www.datarescue.com/idabase/.
26. Capture the RootFu! The Shmoo Group. http://www.shmoo.com/cctf/.
27. CyberDefense Exercise. United States Military Academy. http://www.itoc.usma.edu/cdx/.
28. Scan of the Month. The Honeynet Project. http://www.honeynet.org/scans/
29. Maps, Directions and More. MapQuest. http://www.mapquest.com/.
30. PacketX - wrapper for WinPcap packet capture library. beeSync Technologies. http://www.beesync.com/packetx/index.html.
31. Gregory Conti and Kulsoom Abdullah. "Passive Visual Fingerprinting of Network Attack Tools," ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec), 2004.
32. Ruoming Pang, Vinod Yegneswaran, Paul Barford, Vern Paxson and Larry Peterson. "Characteristics of Internet Background Radiation," ACM SIGCOMM Internet Measurement Conference (ACM-IMC), 2003.
33. Gregory Conti, Mustaque Ahamad and John Stasko. "Attacking Information Visualization System Usability: Overloading and Deceiving the Human," Symposium on Usable Privacy and Security (SOUPS), 2005.