User requirements and design of a visualization for intrusion detection analysis

Proceedings from the 6th Annual IEEE System, Man and Cybernetics Information Assurance Workshop, SMC 2005

Volumn 2005, Issue , 2005, Pages 394-401

  Goodall, John R ^a  

^a UNIVERSITY OF MARYLAND BALTIMORE COUNTY   (United States)

Author keywords

Information visualization; Intrusion detection; User centered design

Indexed keywords

INFORMATION VISUALIZATION; INTRUSION DETECTION; INTRUSION DETECTION (ID); USER CENTERED DESIGN;

COMPUTER NETWORKS; DATA REDUCTION; INFORMATION ANALYSIS; MATHEMATICAL MODELS; TELECOMMUNICATION TRAFFIC; USER INTERFACES; VISUALIZATION;

COMPUTER PRIVACY;

EID: 33645243542     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAW.2005.1495979     Document Type: Conference Paper

References (20)

1. "2004 E-Crime Watch Survey: Summary of Findings," CSO Magazine/U.S. Secret Service/CERT Coordination Center, 2004.
2. J. McHugh, "Intrusion and Intrusion Detection," Int'l J. of Information Security, vol. 1, no. 1, 2001, pp. 14-35.
3. K. Julisch and M. Dacier, "Mining Intrusion Detection Alarms for Actionable Knowledge," Proc. ACM SIGKDD Int'l Conference Knowledge Discovery and Data Mining, 2002, pp. 366-375.
4. J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, and E. Stoner, State of the Practice of Intrusion Detection Technologies, Tech. Report CMU/SEI-99-TR-028, 1999.
5. S. K. Card, J. D. Mackinlay, and B. Shneiderman, Information Visualization: Using Vision to Think. San Francisco, CA, USA: Morgan Kaufman Publishers, 1999.
6. W. Yurcik, J. Barlow, K. Lakkaraju, and M. Haberman, "Two Visual Computer Network Security Monitoring Tools Incorporating Operator Interface Requirements," ACM CHI Workshop HCI and Security Systems (HCISEC), 2003.
7. M. Stolze, R. Pawlitzek, and A. Wespi, "Visual Problem-Solving Support for New Event Triage in Centralized Network Security Monitoring: Challenges, Tools and Benefits," GI-SIDAR Conf. IT-Incident Management & IT-Forensics (IMF), 2003.
8. R. Ball, G. A. Fink, and C. North, "Home-Centric Visualization of Network Traffic for Security Administration," ACM Workshop Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004, pp. 55-64.
9. R. A. Becker, S. G. Eick, and A. R. Wilks, "Visualizing Network Data," IEEE Transactions on Visualization and Computer Graphics, vol. 1, no. 1, 1995, pp. 16-28.
10. K. C. Cox, S. G. Eick, and G. J. Wills, "Visual Data Mining: Recognizing Telephone Calling Fraud," J. of Data Mining and Knowledge Discovery, vol. 1, no. 2, 1997, pp. 225-231.
11. X. Yin, W. Yurcik, M. Treaster, Y. Li, and K. Lakkaraju, "VisFlowConnect: NetFlow Visualizations of Link Relationships for Security Situational Awareness," ACM Workshop Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004, pp. 26-34.
12. L. Girardin and D. Brodbeck, "A Visual Approach for Monitoring Logs," Proc. 12th Systems Admin. Conference (LISA), 1998, pp. 299-308.
13. G. Conti and K. Abdullah, "Passive Visual Fingerprinting of Network Attack Tools," ACM Workshop Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004, pp. 45-54.
14. K. Lakkaraju, W. Yurcik, and A. J. Lee, "NvisionIP: NctFlow Visualizations of System State for Security Situational Awareness," ACM Workshop Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004, pp. 65-72.
15. J. McPherson, K.-L. Ma, P. Krystosk, T. Bartoletti, and M. Christensen, "PortVis: A Tool for Port-Based Detection of Security Events," ACM Workshop Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004, pp. 73-81.
16. R. F. Erbacher, K. L. Walker, and D. A. Frincke, "Intrusion and Misuse Detection in Large-Scale Systems," IEEE Computer Graphics and Applications, vol. 22, no. 1, 2002, pp. 38-48.
17. M. Roesch, "Snort - Lightweight Intrusion Detection for Networks," Proc. 13th Systems Admin. Conference (LISA), 1999, pp. 229-238.
18. C. G. Healey, "Building a Perceptual Visualization Architecture," Behaviour and Information Technology, vol. 19, no. 5, 2000, pp. 349-367.
19. C. Ahlberg and B. Shneiderman, "Visual Information Seeking: Tight Coupling of Dynamic Query Filters with Starfield Displays," ACM Conf. Human Factors in Computing Systems (CHI), 1994, pp. 313-317.
20. J. D. Mackinlay, G. G. Robertson, and S. K. Card, "The Perspective Wall: Detail and Context Smoothly Integrated," ACM Conf. Human Factors in Computing Systems (CHI), 1991, pp. 173-179.