Visualizing network data for intrusion detection

Proceedings from the 6th Annual IEEE System, Man and Cybernetics Information Assurance Workshop, SMC 2005

Volumn 2005, Issue , 2005, Pages 100-108

  Abdullah, Kulsoom ^a   Lee, Chris ^a   Conti, Gregory ^b   Copeland, John A ^a  

^a GEORGIA INSTITUTE OF TECHNOLOGY   (United States)

^b Georgia Institute of Technology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

HISTOGRAMS; INTRUSION DETECTION; SCALING TECHNIQUES; TRAFFIC VISUALIZATION TECHNIQUES;

COMPUTER CRIME; COMPUTER NETWORKS; COMPUTER SCIENCE; CYBERNETICS; INFORMATION TECHNOLOGY; PATTERN RECOGNITION; REAL TIME SYSTEMS; VISUALIZATION;

SECURITY OF DATA;

EID: 33745460819     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IAW.2005.1495940     Document Type: Conference Paper

References (29)

1. C. Shannon and D. Moore, "The spread of the witty worm." CAIDA. Updated April 2004.
2. W. Arbaugh, "A patch in nine saves time?," Computer, pp. 82-83, June 2004.
3. P. Lyman, "How much information 2003," October 2003.
4. P. Jungck and S. S. Y. Shim, "Issues in high-speed internet security," Computer, vol. 37, pp. 36-42, July 2004.
5. S. K. Card, J. D. Mackinlay, and B. Shneiderman, Readings in Information Visualization: Using Vision to Think. Morgan Kaufmann, 1999.
6. C. Ware, Information Visualization: Perception for Design. California: Academic Press, 2000.
7. "Tcpdump/libpcap." Last updated April 3, 2004.
8. J. Levine, R. LaBella, H. Owen, D. Contis, and B. Culver, "The use of honeynets to detect exploited systems across large enterprise networks," in Proceedings of the IEEE Workshop on Information Assurance, IEEE Systems, Man and Cybernetics Society, (West Point, NY), pp. 92-99, June 2003.
9. R. Becker, S. Eick, and A. Wilks, "Visualizing network data," IEEE Transactions on Visualization and Computer Graphics, vol. 1, pp. 16-28, March 1995.
10. K. Cox and S. Eick, "Case study: 3d displays of internet traffic," in Proceedings of Information Visualization (INFOVIS), IEEE Computer Society, pp. 129-131, Oct. 1995.
11. R. Erbacher, K. Walker, and D. Frincke, "Intrusion and misuse detection in large-scale systems," Computer Graphics and Applications, vol. 22, pp. 38-48, January/February 2002.
12. K. Nyarko, T. Capers, C. Scott, and K. Ladeji-Osias, "Network intrusion visualization with niva: an intrusion detection visual analyzer with haptic integration," in 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems (HAPTICS '02), pp. 277-284, March 2002.
13. X. Yin, W. Yurcik, Y. Li, K. Lakkaraju, and C. Abad, " Visflowconnect: Providing security situational awareness by visualizing network traffic flows," in Proceedings on the Workshop on Information Assurance (WIA04), 2004. held in conjunction with the 23rd IEEE International Performance Computing and Communications Conference (IPCCC 2004).
14. E. Swing, "Flodar: Flow visualization of network traffic," IEEE Computer Graphics and Applications, vol. 18, pp. 6-8, Sept.-Oct. 1998.
15. A. D'Amico and S. Salas, "Visualization as an aid for assessing the mission impact of information security breaches," in Proceedings of DARPA Information Survivability Conference and Exposition (DISCEX), vol. 2, pp. 18-20, April 2003.
16. "Stealthwatch+therminator." Lancope, 2004. http://www.lancope. com/.
17. D. Ford, "Application of thermodynamics to the reduction of data generated by a non-standard system," tech. rep., Department of Physics Naval Postgraduate School, Montetey, CA., Feb. 2004. Available at http://www.arxiv.org/abs/cond-mat/0402325.
18. S. D. Donald and R. V. McMillen, Therminator2: Developing a Real Time Thermodynamic Based Pattemless Intrusion Detection System. PhD thesis. Naval Postgraduate School, Monterey, California, 2001.
19. W. Yurcik, K. Lakkaraju, J. Barlow, and J. Rosendale, "A prototype tool for visual data mining of network traffic for intrusion detection," in 3rd IEEE International Conference on Data Mining (ICDM) Workshop on Data Mining for Computer Security (DMSEC), 2003.
20. D. Gilbert and T. Morgner, "Jfreechart," 2003 - 2005.
21. D. Keim, M. Hao, and U. Dayal, "Hierarchical pixel bar charts," IEEE Transactions on Visualization and Computer Graphics, vol. 8, pp. 255-269, July-Sept. 2002.
22. R. Spence, Information Visualization. England: ACM Press, 2001.
23. "10 most probed ports." Distributed Intrusion Detection System, June 2004. http://www.dshield.org/topports.php.
24. "Port numbers." Internet Assigned Numbers Authority. Last updated 28 May 2004.
25. E. Skoudis, Counter Hack: A Step-by-Step Guide to Computer Attacks and Effective Defenses, New Jersey: Prentice Hall, 2001.
26. M. Minioso, "Experts ponder spam, worm-writing connection." Search Security, Nov. 2003.
27. N. Krawetz, "Anti-spam solutions and security, part 2." Security Focus.
28. "Netsys.com: The intelligent hacker's choice." DDoS article.
29. "Honeynet project: Scan of the month," 2004.