Visual correlation for situational awareness

Proceedings - IEEE Symposium on Information Visualization, INFO VIS

Volumn , Issue , 2005, Pages 95-102

  Livnat, Yarden ^a   Agutter, Jim ^a   Moon, Shaun ^a   Foresti, Stefano ^a  

^a UNIVERSITY OF UTAH   (United States)

Author keywords

Network intrusion; Situation awareness; Visualization

Indexed keywords

GENERALIZATION; NETWORK INTRUSIONS; SITUATION AWARENESS; VISUAL CORRELATIONS; ENVIRONMENTAL INFORMATION; INTRUSION DETECTION; NETWORK INTRUSION;

CORRELATION DETECTORS; INFORMATION RETRIEVAL; VISUAL COMMUNICATION; VISUALIZATION; DATA ACQUISITION; KNOWLEDGE ENGINEERING;

IMAGE ANALYSIS; INFORMATION ANALYSIS;

EID: 33749395343     PISSN: 1522404X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/INFVIS.2005.1532134     Document Type: Conference Paper

References (19)

1. Hervé Debar and Andreas Wespi. Aggregation and correlation of intrusion-detection alerts. In Recent Advances in Intrusion Detection, pages 85-103, 2001.
2. Secure Decisions. http://www.securedecisions.com.
3. M. R. Endsley. Design and evaluation for situation awareness enhancement. In Proceedings of the Human Factors Society 32nd Annual Meeting, pages 97-101, Santa Monica, CA, 1988. Human Factor Society.
4. M. R. Endsley, R. Sollenberger, and E. Stein. Situation awareness: A comparison of measures. In Proceedings of the Human Performance, Situation Awareness and Automation: User-Centered Design for the New Millennium, Savannah, GA, 2000. SA Technologies, Inc.
5. Mica R. Endsley, Betty Bolté, and Debra G. Jones. Designing For Situational Awareness, An Approach to User-Centered Design. Taylor & Francis, 2003.
6. Deborah Estrin, Mark Handley, John Heidermann, Steven McCanne, Ya Xu, and Haobo Yu. Network visualization with nam, the vint network animator. IEEE Computer, 33(11):63-68, November 2000.
7. Michels P. Gravenstein and D. Westenskow. Dr: An integrated graphic data display improves detection and identification of critical events during anesthesia. J. Clin. Monit, 13:249-259, 1997.
8. D. G. Jones and M. R. Endsley. Sources of situation awareness errors in aviation. Aviation, Space and Environmental Medicine, 67(6):507-512, 1996.
9. D. G. Jones and M. R. Endsley. Can real-time probes provide a valid measure of situation awareness? In Proceedings of the Human Performance, Situation Awareness and Automation: User-Centered Design for the New Millennium, Savannah, GA, 2000. SA Technologies, Inc.
10. Clarence A. Robinson Jr. A powerful vision. Signal Magazine, August 2001. http://www.afcea.org/signal/articles.
11. Stephen Eick Kenneth Cox and Taosong He. 3d geographic network displays. ACM Sigmod Record, 25(4), 50 1996. December.
12. Kiran Lakkaraju and abd Adam J. Lee William Yurcik. Nvisionip: netflow visualizations of system state for security situational awareness. In Proceedings of CCS Workshop on Visualization and Data Mining for Computer Security, ACM Conference on Computer and Communications Security, October 29 2004.
13. Yarden Livnat, Jim Agutter, Shaun Moon, Robert F. Erbacher, and Stefano Foresti. A visualization paradigm for network intrusion detection. In 6th IEEE Systems, Man and Cybernetics Information Assurance Workshop, pages 92-99, West Point, NY, June 2005. IEEE.
14. Jonathan McPherson, Kwan-Liu Ma, Paul Krystosekand Tony Bartoletti, and Marvin Christensen. Portvis: A tool for port-based detection of security events. In CCS Workshop on Visualization and Data Mining for Computer Security, October 2004.
15. Quantum3D. http://www.quantum3d.com/stories/isd.htm.
16. K.L. Ma S.T. Teoh and S. F. Wu. Visual exploration process for the analysis of internet routing data. In IEEE Conference on Visualization 2003, pages 523-530, 2003.
17. Alfonso Valdes and Keith Skinner. Probabilistic alert correlation. In Recent Advances in Intrusion Detection, pages 54-68, 2001.
18. Alex Wood. Intrusion detection: Visualizing attacks in ids data. Giac gcia practical, SANS Institute, February 2003.
19. Xiaoxin Yin, William Yurcik, Michael Treaster, Yifan Li, and Kiran Lakkaraju. Visflowconnect: netflow visualizations of link relationships for security situational awareness. In Proceedings of CCS Workshop on Visualization and Data Mining for Computer Security,ACM Conference on Computer and Communications Security, October 29 2004.