Visual correlation of host processes and network traffic

IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

Volumn , Issue , 2005, Pages 11-19

  Fink, Glenn A ^a   Muessig, Paul ^a   North, Chris ^a  

^a VIRGINIA POLYTECHNIC INSTITUTE AND STATE UNIVERSITY   (United States)

Author keywords

Computer Security; Information Visualization; System Administration

Indexed keywords

COMPUTER SYSTEM INTRUSIONS; INFORMATION VISUALIZATION; PORTALL VISUALIZATION; SYSTEM ADMINISTRATION;

CORRELATION METHODS; PROBLEM SOLVING; SECURITY OF DATA; USABILITY ENGINEERING; WIRELESS TELECOMMUNICATION SYSTEMS;

TELECOMMUNICATION TRAFFIC;

EID: 33749537716     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/VIZSEC.2005.1532061     Document Type: Conference Paper

References (17)

1. Robert G. Ball, Glenn A. Fink, Anand Rathi, Sumit Shah, and Chris North, "Home-Centric Visualization of Network Traffic for Security Administration," Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC 2004), ACM Press, New York, NY, USA, pp. 55-64, October, 2004.
2. Glenn A. Fink, Ricardo Correa, and Chris North, "System Administrators and Their Security Awareness Tools." submitted for publication, 2005.
3. Stuart K. Card, Jock D. Mackinlay, and Ben Shneiderman, "Information Visualization," Readings in information visualization: Using vision to think, Card, S.K., Mackinlay, J.D. and Shneiderman, B. eds., Morgan Kaufmann Publishers, San Francisco, Calif., pp. 1-34, 1999.
4. ZoneAlarm from ZoneLabs, http://www.zonelabs.com/, August, 2005
5. Robert Bosch, et al., "Rivet: The Visible Computer," http://graphics.stanford.edu/projects/rivet/, August, 2005
6. William Yurcik, Xin Meng, and Nadir Kiyanclar, "NVisionCC: a visualization framework for high performance cluster security," Proceedings of VizSEC 2004, ACM Press, New York, NY, USA, pp. 133-137, October, 2004.
7. Hyogon Kim, Inhye Kang, and Saewoong Bahk, "Real-time visualization of network attacks on high-speed links," IEEE Network, IEEE Press, Washington, DC, pp. 30-39, 2004.
8. Kiran Lakkaraju, William Yurcik, and Adam J. Lee, "NVisionIP: netflow visualizations of system state for security situational awareness." Proceedings of VizSEC 2004, ACM Press, New York, NY, USA, pp. 65-72, October, 2004.
9. Xiaoxin Yin, William Yurcik, Michael Treaster, Yifan Li, and Kiran Lakkaraju, "VisFlowConnect: netflow visualizations of link relationships for security situational awareness," Proceedings of VizSEC 2004, ACM Press, New York, NY, USA, pp. 26-34.
10. Jonathan McPherson, Kwan-Liu Ma, Paul Krystosek, Tony Bartoletti, and Marvin Christensen, "PortVis: A Tool for Port-Based Detection of Security Events Proceedings of VizSEC 2004, ACM Press, New York, NY, USA, pp. 73-81.
11. Stephen Lau, "The Spinning Cube of Potential Doom," Communications of the ACM, 47 (6), ACM Press, New York, NY, USA, pp. 25-26, October, 2004.
12. Secure Decisions, http://www.SecureDecisions.com, August, 2005.
13. Ben Shneiderman, The Eyes Have It: A Task by Data Type Taxonomy for Information Visualizations, CS-TR-3665, Department of Computer Science, University of Maryland, Human-Computer Interaction Laboratory, and Institute for Systems Research, 1996.
14. WinPCap: The Windows Packet Capture Library. http://www.winpcap.org/, August, 2005.
15. Glenn A. Fink, Vedavyas Duggirala, and Chris North, "The Host/Network Divide." submitted for publication, 2005.
16. Cristian Estan, Stephen Savage, and George Varghese, "Automatically inferring patterns of resource consumption in network traffic," Proceedings of the 2003 conference on Applications, technologies, architectures, and protocols for computer communications, ACM Press, New York, NY, USA, pp. 137-148, 2003.
17. Kozo Sugiyama, S. Tagawa, and M. Toda, "Methods for Visual Understanding of Hierarchical System Structures", IEEE Transactions on Systems, Man, and Cybernetics, SMC-11 (1981), IEEE Press, Washington, DC, pp. 109-125, 1981.