Interactive visualization for network and port scan detection

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3858 LNCS, Issue , 2006, Pages 265-283

  Muelder, Chris ^a   Ma, Kwan Liu ^a   Bartoletti, Tony ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b LAWRENCE LIVERMORE NATIONAL LABORATORY   (United States)

Author keywords

Information visualization; Intrusion detection; Network scans; Network security; Port scans; User interfaces

Indexed keywords

INFORMATION VISUALIZATION; INTRUSION DETECTION; NETWORK SCANS; NETWORK SECURITY; PORT SCANS;

COMPUTER CRIME; COMPUTER NETWORKS; INFORMATION RETRIEVAL; SCANNING; USER INTERFACES; VISUALIZATION;

SECURITY SYSTEMS;

EID: 33745653877     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11663812_14     Document Type: Conference Paper

References (19)

1. Richard A. Becker, Stephen G. Eick, and Allan R. Wilks, Visualizing network data. IEEE Transactions on Visualization and Computer Graphics, l(1):16-28, 1995.
2. P. Dokas, L. Ertoz, V. Kumar, A. Lazarevic, J. Srivastava, and P. Tan, Data mining for network intrusion detection. In Proc, NSF Workshop on Next Generation Data Mining, 2002.
3. Robert F. Erbacher. Visual traffic monitoring and evaluation. In Proceedings of the Conference on Internet Performance and Control of Network Systems II, pages 153-160, 2001.
4. L. Girardin and D. Brodbeck, A visual approach for monitoring logs. In Proceedings of the 12th Usenix System Administration conference, pages 299-308, 1998.
5. Tom Goldring, Scatter (and other) plots for visualizing user profiling data arid network traffic. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 119-123, New York, NY, USA, 2004. ACM Press.
6. Jaeyeon Jung, Vern Paxson, Arthur W. Berger, and Hari Balakrishnan. Fast portscan detection using sequential hypothesis testing, In Proc. IEEE Symposium on Security and Privacy, 2004.
7. Teuvo Kohonen, Self-Organization and Associative Memory. Springer-Verlag, Berlin, 3rd edition, 1989.
8. Kiran Lakkaraju, Ratna Bearavolu, and William Yurcik, NVisionIP - a traffic visualization tool for security analysis of large and complex networks. In International Multiconference on Measurement, Modelling, and Evaluation of ComputerCommunications Systems (Performance TOOLS), 2003.
9. Stephen Lau. The spinning cube of potential doom. Communications of the ACM, 47(6);25-26, 2004.
10. David J. Marchette, V. Nair, M. Jordan, S. L. Lauritzen, and J. Lawless. Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint. Statistics for Engineering and Information Science. Springer-Verlag, New York, 2001.
11. J. McPherson, K.-L. Ma, P. Krystosk, T. Bartoletti, and M. Christensen. Portvis: A tool for port-based detection of security events. In ACM VizSEC &004 Workshop, pages 73-81, 2004.
12. K. Mundiandy, Case study: Visualizing time related events for intrusion detection. In Proceedings of the IEEE Symposium on Information Visualization 8001, pages 22-23, 2001.
13. Ruoming Pang, Vinod Yegneswaran, Paul Barford, Vern Paxson, and Larry Peterson. Characteristics of internet background radiation. In Proceedings of the Internet Measurement Conference, 2004.
14. Bryan Parno and Tony Bartoletti. Internet ballistics: Retrieving forensic data from network scans, Poster Presentation, the 13th USENIX Security Symposium, August 2004.
15. Leonid Portnoy, Eleazar Eskin, and Salvatore J. Stolfo. Intrusion detection with unlabeled data using clustering. In Proceedings of ACM CSS Workshop on Data Mining Applied to Security (DMSA-2001), 2001.
16. S. Staniford, V. Paxson, and N. Weaver, How to own the internet in your spare time. In Proceedings of the 2002 Usenix Security Symposium, 2002.
17. Soon Tee Teoh, Kwan-Liu Ma, S. Felix Wu, and Xiaoliang Zhao. Case study: Interactive visualization for internet security, In Proc. IEEE Visualization, 2002.
18. F. W. Young and R. M. Hamer, Multidimensional Scaling: History, Theory and Applications. Erlbaum, New York, 1987.
19. William Yurcik, Jarnes Barlow, Kiran Lakkaraju, and Mike Haberman. Two visual computer network security monitoring tools incorporating operator interface requirements, In A CM CHI Workshop on Human-Computer Interaction and Security Systems (HCISEC), 2003.