Real-time and forensic network data analysis using animated and coordinated visualization

Proceedings from the 6th Annual IEEE System, Man and Cybernetics Information Assurance Workshop, SMC 2005

Volumn 2005, Issue , 2005, Pages 42-49

  Krasser, Sven ^a,b   Conti, Gregory ^a,c   Grizzard, Julian ^a,b   Gribschaw, Jeff ^a,b   Owen, Henry ^a,b  

^a IEEE   (United States)

^b GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

^c Georgia Institute of Technology   (United States)

Author keywords

Forensic visualization; Honeynet visualization; Honeypot visualization; Network visualization; Real time visualization; Security visualization

Indexed keywords

FORENSIC VISUALIZATION; HONEYNET VISUALIZATION; NETWORK VISUALIZATION; REAL-TIME VISUALIZATION; SECURITY VISUALIZATION;

COMPUTER SIMULATION; CYBERNETICS; DATA ACQUISITION; DATA REDUCTION; DISPLAY DEVICES; INFORMATION TECHNOLOGY; PROBLEM SOLVING; REAL TIME SYSTEMS;

COMPUTER NETWORKS;

EID: 33745456201     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAW.2005.1495932     Document Type: Conference Paper

References (24)

1. Tufte, E. The Visual Display of Quantitative Information. Second Edition. Graphics Press, May 2001.
2. Tufte, E. Visual Explanations: Images and Quantities, Evidence and Narrative. Graphics Press, February 1997.
3. Tufte, E. Envisioning Information. Graphics Press, May 1990.
4. Spence, R. Information Visualization. Pearson Addison Wesley, December 2000.
5. Girardin, L. An Eye on Network Intruder-Administrator Shootouts. USENIX 1st Workshop on Intrusion Detection and Network Monitoring, 1999.
6. Nyarko, K; Capers, T; Scott, C and Ladeji-Osias, K. Network Intrusion Visualization with NIVA, an Intrusion Detection Visual Analyzer with Haptic Integration. 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems. March 24 - 25, 2002. Orlando, Florida, p. 277.
7. The Spinning Cube of Potential Doom. http://www.nersc.gov/nusers/ security/TheSpinningCube.php, last accessed March 2005.
8. Inselberg, A. Multidimensional Detective. IEEE Symposium on Information Visualization, 1997.
9. Marchette, D. Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint, Springer, 2001.
10. Conti, G. and Abdullah, K. Passive Visual Fingerprinting of Network Attack Tools. ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC), pp. 45-54, Washington, D.C., October 2004.
11. X. Yin, W. Yurcik, M. Treaster, Y. Li, and K. Lakkaraju, VisFIowConnect: NetFlow Visualizations of Link Relationships for Security Situational Awareness. ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC), pp. 26-34, Washington, D.C., October 2004.
12. Security Incident Fusion Tool, National Center for Advanced Secure Systems Research Group. http://www.ncassr.org/projects/sift/papers/, last accessed April 2004.
13. EtherApe: A Graphical Network Monitor, http://etherape.sourceforge.net/, last accessed December 2004.
14. Erbacher, R and Frincke, D. Visual Behavior Characterization for Intrusion and Misuse Detection. Proceedings of the SPIE '2001 Conference on Visual Data Exploration and Analysis VIII, CA, January 2001, pp. 210-218.
15. Komlodi, A; Goodall, J; Lutters, W. (2004) An Information Visualization Framework for Intrusion Detection. Proceedings of the ACM Conference on Human Factors in Computing Systems (ACM CHI), ACM Press, 2004.
16. Fink, G.; Ball, R; Jawalkar, N.; North, C. and Correa, R. Network Eye: End-to-End Computer Security Visualization. Submitted for consideration at ACM CCS Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSec) 2004.
17. Snort: The Open Source Intrusion Detection System, http://www.snort.org/, last accessed December 2004.
18. TCPDump Public Repository, http://www.tcpdump.org/, last accessed December 2004.
19. Ethereal: A Network Protocol Analyzer, http://www.ethereal.com/, last accessed December 2004.
20. Stealth Watch + Therminator. Lancope Corporation. http://www. stealthwatch.com/, last accessed April 2004.
21. Activeworx.org, Honeynet Security Console, http://www.activeworx.org/ programs/hsc/index.htm.
22. Balas, E., Honeynet Data Analysis: A technique for correlating sebek and network data, http://www.dfrws.org/bios/day2/Balas_Honeynets_for_DF.pdf, last accessed November 2004.
23. Open Source Security Information Management, http://www.ossim.net/, last accessed February 2005.
24. NETI@home, http://neti.gatech.edu/, last accessed February 2005.