A visualization methodology for characterization of network scans

IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

Volumn , Issue , 2005, Pages 29-38

  Muelder, Chris ^a   Ma, Kwan Liu ^a   Bartoletti, Tony ^b  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b LAWRENCE LIVERMORE NATIONAL LABORATORY   (United States)

Author keywords

Adversary characterization; Clustering; Cyber forensics; Graph visualization; Information visualization; Network scans; Scalograms; Security visualization; Wavelets

Indexed keywords

ADVERSARY CHARACTERIZATION; CYBER FORENSICS; GRAPH VISUALIZATION; INFORMATION VISUALIZATION; NETWORK SCANS; SCALOGRAMS; SECURITY VISUALIZATION;

COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER CRIME; COMPUTER NETWORKS; ROUTERS; STATISTICAL METHODS; WIRELESS TELECOMMUNICATION SYSTEMS;

TELECOMMUNICATION TRAFFIC;

EID: 33749513452     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/VIZSEC.2005.1532063     Document Type: Conference Paper

References (14)

1. Richard A. Becker, Stephen G. Eick, and Allan R. Wilks. Visualizing network data. IEEE Transactions on Visualization and Computer Graphics, 1(1):16-28, 1995.
2. Gregory Conti and Kulsoom Abdullah. Passive visual fingerprinting of network attack tools. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 45-54, New York, NY, USA, 2004. ACM Press.
3. Robert F. Erbacher. Visual traffic monitoring and evaluation. In Proceedings of the Conference on Internet Performance and Control of Network Systems II, pages 153-160, 2001.
4. L. Girardin and D. Brodbeck. A visual approach for monitoring logs. In Proceedings of the 12th Usenix System Administration conference, pages 299-308, 1998.
5. Amara Graps. An introduction to wavelets. IEEE Computational Sciences and Engineering, 2(2):50-61, 1995.
6. Tin Kam Ho. Mirage: A tool for interactive pattern recognition from multimedia data. In Proc. of Astronomical Data Analysis Software and Systems XII, 2002.
7. Teuvo Kohonen. Self-Organization and Associative Memory. Springer-Verlag, Berlin, 3rd edition, 1989.
8. Kiran Lakkaraju, Ratna Bearavolu, and William Yurcik. NVisionIP-a traffic visualization tool for security analysis of large and complex networks. In International Multiconference on Measurement, Modelling, and Evaluation of Computer-Communications Systems (Performance TOOLS), 2003.
9. Stephen Lau. The spinning cube of potential doom. Communications of the ACM, 47(6):25-26, 2004.
10. J. McPherson, K.-L. Ma, P. Krystosk, T. Bartoletti, and M. Christensen. Portvis: A tool for port-based detection of security events. In ACM VizSEC2004 Workshop, pages 73-81, 2004.
11. Andreas Noack. An energy model for visual graph clustering. Lecture Notes in Computer Science, 2912:425-436, March 2004.
12. Bryan Parno and Tony Bartoletti. Internet ballistics: Retrieving forensic data from network scans. Poster Presentation, the 13th USENIX Security Symposium, August 2004.
13. Leonid Portnoy, Eleazar Eskin, and Salvatore J. Stolfo. Intrusion detection with unlabeled data using clustering. In Proceedings of ACM CSS Workshop on Data Mining Applied to Security (DMSA-2001), 2001.
14. S. Staniford, V. Paxson, and N. Weaver. How to own the internet in your spare time. In Proceedings of the 2002 Usenix Security Symposium, 2002.