InetVis, a visual tool for network telescope traffic analysis

ACM International Conference on Computer Graphics, Virtual Reality and Visualisation in Africa

Volumn 2006, Issue , 2006, Pages 85-89

  Van Riel, Jean Pierre ^a   Irwin, Barry ^a  

^a RHODES UNIVERSITY   (South Africa)

Author keywords

3 D (three dimensional) scatter plot; InetVis; Internet traffic analysis; Intrusion detection; Network monitoring; Network security; Network visualization; Visual intrusion signatures

Indexed keywords

COMPUTER GRAPHICS; INTERNET; INTRUSION DETECTION; NETWORK ARCHITECTURE; NETWORK SECURITY; TELECOMMUNICATION TRAFFIC;

INTERNET TRAFFIC ANALYSIS; NETWORK MONITORING; NETWORK SCANNING TOOLS; NETWORK VISUALIZATION; VISUAL INTRUSION SIGNATURES;

ANIMATION;

EID: 34247215073     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1108590.1108604     Document Type: Conference Paper

References (15)

1. AXELSON, S. 2004. Combining a Bayesian Classifier with Visualization: Understanding the IDS. In Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, ACM Press, New York. 99-108.
2. BALL, R., FINK, G.A., NORTH, C. 2004. Home-centric visualization of network traffic for security administration. In Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, ACM Press, New York. 55-64.
3. BRO. 2005. Bro NIDS, http://www.bro-ids.org (03/06/2005).
4. CERT/CC - CERT® COORDINATION CENTER. 2005. Carnegie Mellon Software Engineering Institute. Carnegie Mellon University. http://www.cert.org/ (27/05/2005).
5. CLARK, D. 2005. Scanmap3D-2.1b and Scanmap3D-3.0. Open source Snort visualization tool. http://scanmap3d.sourceforge.net/ (29/05/2005).
6. ETHEREAL. 2005. Packet capture and textual review tool http://www.ethereal.com/ (07/11/2005).
7. FISK, M., SMITH, S.A., WEBER, P.M., KOTHAPALLY, S., CAUDELL, T.P. 2003. Immersive Network Monitoring. PAM2003 - Passive and Active Measurement 2003, NLANR/MNA (National Laboratory for Applied Network Research / Measurement and Network Analysis Group). http://public.lanl.gov/mfisk/papers/pam03.pdf (25/05/2005).
8. LAU, S. 2004. The Spinning Cube of Potential Doom. In Communications of the ACM archive, Volume 47, Issue 6, ACM Press, New York. 25-26.
9. LAU, S. 2003. The Spinning Cube of Potential Doom. Online article, November 10th, 2003. National Energy Research Scientific Computing Center (NERSC) website: http://www.nersc.gov/nusers/security/TheSpinningCube.php (18/09/2005).
10. NMAP. 2005. NMap network scanning utility. http://www.insecure. org/nmap/ (07/11/2005).
11. SNORT. 2005. Snort network intrusion prevention and detection system, http://www.snort.org/ (12/11/2005).
12. TCPDUMP. 2005. TCPDump packet capture utility and LibPCap packet capture library, http://www.tcpdump.org (06/11/2005).
13. TEOH, S.T., MA, K-L., WU, S.F., JANKUN-KELLY, D.T.J. 2004. Detecting Flaws and Intruders with Visual Data Analysis. In IEEE Computer Graphics and Applications, Volume 24, Issue 5.
14. TURNER, D. (EXEC. ED.), ENTWISE, S. (ED.), ET AL (SYMANTEC). 2005. Symantec Internet Security Threat Report, Trends for July 04 - December 04, Volume VIII, March 2005. http://enterprisesecurity.symantec.com/content.cfm?articleid= 1539 (20/04/2005).
15. YIN, X., YURCIK, W., TREASTER, M., LI, Y., LAKKARAJU, K. 2004. VisFlowConnect: netflow visualizations of link relationships for security situational awareness. In Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, ACM Press, New York. 35-44.