Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations

IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

Volumn , Issue , 2005, Pages 75-82

  Lakkaraju, Kiran ^a,c   Bearavolu, Ratna ^a,c   Slagell, Adam ^a,c   Yurcik, William ^a,c   North, Stephen ^b  

^a NCSA/UIUC   (United States)

^b AT AND T LABS RESEARCH   (United States)

^c UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Intrusion Detection Systems; Network Security; Security Visualization

Indexed keywords

INTRUSION DETECTION SYSTEMS; NETWORK SECURITY; SECURITY VISUALIZATION;

COMPUTER AIDED SOFTWARE ENGINEERING; COMPUTER CRIME; DATA REDUCTION; NETWORK PROTOCOLS; SEARCH ENGINES;

SECURITY OF DATA;

EID: 33749527089     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/VIZSEC.2005.1532068     Document Type: Conference Paper

References (15)

1. www.snort.org.
2. Argus web site, http://www.qosient.com/argus/index.htm.
3. tcpdump. www.tcpdump.org.
4. Greg Conti and K. Abdullah. Passive visual fingerprinting of network attack tools. In Proceeding of the CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC) 2004.
5. Martin Dodge and Rob Kitchin. Atlas of Cyberspace. Addison Wesley, Harlow, 2001.
6. Yiming Gong. Identifying p2p users using traffic analysis. www.securityfocus.com/infocus/1843, July 2004.
7. Jiawei Han and Micheline Kamber. Data Mining: Concepts and Techniques. Morgan Kaufmann, 2001.
8. Eleftherios Koutsofios, Stephen C. North, Russell Truscott, and Daniel A. Keim. Visualizing large-scale telecommunication networks and services. In IEEE Visualization, pages 457-461, 1999.
9. Kiran Lakkaraju, Ratna Bearavolu, Adam Slagell, and William Yurcik. Closing-the-loop: Discovery and search in security visualizations. In Proceedings of the 6th IEEE Information Assurance Workshop, 2005.
10. Kiran Lakkaraju, William Yurcik, Adam J. Lee, Ratna Bearavolu, Yifan Li, and Xiaoxin Yin. Nvisionip: Netflow visualizations of system state for security situational awareness. In Proceeding of the CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC) 2004.
11. Stephen Lau. The spinning cube of potential doom. Communications of the ACM, 47(6):25-26, 2004.
12. Vern Paxson. Bro: a system for detecting network intruders in real-time. Computer Networks (Amsterdam, Netherlands: 1999), 31(23-24):2435-2463, 1999.
13. Soon Tee Teoh, Kwan-Liu Ma, S. Felix Wu, and Xiaoling Zhao. Case study: Interactive visualization for internet security. In IEEE Visualization, 2002.
14. Soon Tee Teoh, Ke Zhang, Shih-Ming Tseng, Kwan-Liu Ma, and S. Felix Wu. Combining visual and automated data mining for near-real-time anomaly detection and analysis in bgp. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 35-44, New York, NY, USA, 2004. ACM Press.
15. Xiaoxin Yin, William Yurcik, Michael Treaster, Yifan Li, and Kiran Lakkaraju. Visflowconnect: Netflow visualizations of link relationships for security situational awareness. In Proceeding of the CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC) 2004.