VisFlowCluster-IP: Connectivity-based visual clustering of network hosts

IFIP International Federation for Information Processing

Volumn 201, Issue , 2006, Pages 284-295

  Yin, Xiaoxin ^a   Yurcik, William ^a   Slagell, Adam ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; GRAPH THEORY; INTERNET PROTOCOLS; INTRUSION DETECTION; SECURITY OF DATA; VISUALIZATION;

ANOMALY DETECTION; AUTOMATED METHODS; EFFECTIVE SOLUTION; NETWORK ADMINISTRATOR; NETWORK TRAFFIC FLOW; NETWORK TRAFFIC VISUALIZATION; TWO DIMENSIONAL SPACES; VISUAL CLUSTERING;

NETWORK SECURITY;

EID: 33845521036     PISSN: 15715736     EISSN: None     Source Type: Book Series    
DOI: 10.1007/0-387-33406-8_24     Document Type: Article

References (25)

1. S. Axelsson. Visualisation for Intrusion Detection - Hooking the Worm. Eighth European Symposium on Research in Computer Security (ESORICS), Lecture Notes in Computer Science (LNCS) 2808, Springer, 2003.
2. R. Ball, G. A. Fink, C. North. Home-Centric Visualization of Network Traffic for Security Administration. ACM CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004.
3. R. Becker, S. Eick, A. Wilks. Visualizing network data. IEEE Transactions on Visualization and Computer Graphics, 1(1): 1628, 1995.
4. G. Conti, K. Abdullah. Passive Visual Fingerprinting of Network Attack Tools. ACM CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004.
5. K. Cox, S. Eick, T. He. 3D Geographic Network Displays. ACM SIGMOD Record, 25(4):5-54, 1996.
6. F. Cuppens, A. Miege. Alert Correlation in a Cooperative Intrusion Detection Framework. IEEE Symp. on Security and Privacy, 2002.
7. H. Debar, A. Wespi. Aggregation and Correlation of Intrusion Detection Alerts. Int'l. Symp. on Recent Advances in Intrusion Detection (RAID), 2001.
8. M. Dodge, R. Kitchin. Atlas of Cyberspace. Addison-Wesley, 2001.
9. P. Eades. A Heuristic for Graph-Drawing. Congressus Numerantium, Vol 42, pp 149-160, 1984.
10. S. Eick, G. Wills. Navigating Large Networks with Hierarchies. IEEE Visualization, 1993.
11. R. Erbacher, K. Walker, D. Frincke. Intrusion and Misuse Detection in Large-Scale Systems. IEEE Comp. Graphics and Applications, 22(1):3848, 2002.
12. M. Ester, H.-P. Kriegel, J. Sander, X. Xu. A Density-Based Algorithm for Discovering Clusters in Large Spatial Databases with Noise. ACM Int'l. Conf. on Knowledge Discovery and Data Mining (KDD), 1996.
13. T. Fruchterman, E. Reingold. Graph-Drawing by Force-Directed Placement. Software-Practice and Experience, Vol 21, pp 1129-1164, 1991.
14. C. Krugel, T. Toth, C. Kerer. Decentralized Event Correlation for Intrusion Detection. Int'l. Conf. on Info. Sec. and Cryptology (ICISC), 2001.
15. C. Krugel, T. Toth, E. Kirda. Service Specific Anomaly Detection for Network Intrusion Detection. ACM Symp. on Applied Computing, 2002.
16. K. Lakkaraju, W. Yurcik, A. J. Lee, R. Bearavolu, Y. Li, X. Yi. NVisionIP: NetFlow Visualizations of System State for Security Situational Awareness" ACM CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004.
17. W. Lee, D. Xiang. Information-Theoretic Measures for Anomaly Detection. IEEE Symp. on Security and Privacy, 2001.
18. W. Lee, S. J. Stolfo, K. W. Mok. A Data Mining Framework for Building Intrusion Detection Models. IEEE Symp. on Security and Privacy, 1999.
19. A. Noack. An Energy Model for Visual Graph Clustering. Graph Drawing, 2003.
20. S. T. Teoh et al. Elisha: A Visual-based Anomaly Detection System. Int'l. Symp. on Recent Advances in Intrusion Detection (RAID), 2002.
21. S. T. Teoh, K. Ma, S. F. Wu. A Visual Exploration Process for the Analysis of Internet Routing Data. IEEE Visualization, 2003.
22. S. T. Teoh, K. Ma, S. F. Wu, X. Zhao. Case Study: Internet Visualization for Internet Security. IEEE Visualization, 2002.
23. J. Tölle, O. Niggemann. Supporting Intrusion Detection by Graph Clustering and Graph Drawing. Int'l. Symp. on Recent Advances in Intrusion Detection (RAID), 2000.
24. F. van Ham, J. J. van Wijk. Interactive Visualization of Small World Graphs. IEEE InfoVis, 2004.
25. X. Yin, W. Yurcik, A. Slagell. The Design of VisFlowConnect-IP: A Link Analysis System for IP Security Situational Awareness. IEEE Int'l. Workshop on Information Assurance (IWIA), 2005.