Visualizations to improve reactivity towards security incidents inside corporate networks

Proceedings of the 3rd International Workshop on Visualization for Computer Security, VizSEC'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 95-101

  Hertzog, Patrick ^a  

^a PSE B   (Switzerland)

Author keywords

Alarm visualization; Connection visualization; Parallel coordinates; Reaction time; Reactivity; Security; Starfield

Indexed keywords

HIGH LEVEL LANGUAGES; INTERACTIVE COMPUTER SYSTEMS; PARAMETER ESTIMATION; USER INTERFACES; VISUALIZATION;

ALARM VISUALIZATION; CONNECTION VISUALIZATION; PARALLEL-COORDINATES; SECURITY INCIDENTS;

NETWORK SECURITY;

EID: 34547269828     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179576.1179596     Document Type: Conference Paper

References (12)

1. K. Abdullah, C. Lee, G. Conti, J. A. Copeland, and J. Stasko. Ids rainstorm: Visualizing ids alarms. In Proceedings of the IEEE Workshop on Visualization for Computer Security (VizSEC 2005), Minneapolis, MN, USA, October 2005.
2. C. Ahlberg and B. Shneiderman. Visual information seeking: Tight coupling of dynamic query filters with starfield displays. In Human Factors in Computing Systems. Conference Proceedings CHI'94, New York, NY, USA, 1994.
3. G. Conti, M. Ahamad, and J. Stasko. Attacking information visualization system usability: Overloading and deceiving the human. In Proceedings of the Symposium On Usable Privacy and Security (SOUPS 2005), Pittsburgh, PA, USA, July 2005.
4. G. Conti, J. Grizzard, M. Ahamad, and H. Owen. Visual exploration of malicious network objects using semantic zoom, interactive encoding and dynamic queries. In Proceedings of the IEEE Workshop on Visualization for Computer Security (VizSEC 2005), Minneapolis, MN, USA, October 2005.
5. J. R. Goodall, W. G. Lutters, P. Rheingans, and A. Komlodi. Preserving the big picture: Visual network traffic analysis with tnv. In Proceedings of the IEEE Workshop on Visualization for Computer Security (VizSEC 2005), Minneapolis, MN, USA, October 2005.
6. Y. Hideshima, and H. Koike. Starmine : A visualization system for cyber attacks. In Proceedings of Asia-Pacific Symposium on Information Visualization (APVIS 2006), Tokyo, Japan, February 2006.
7. A. Inselberg. The plane with parallel coordinates. In The Visual Computer, pages 69-91, 1985.
8. H. Koike and K. Ohno. Snortview: Visualization system of snort logs. In Proceedings of the A CM Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC '04), Washington, DC, USA, October 2004.
9. K. Lakkaraju, W. Yurcik, and A. J. Lee. Nvisionip: Netfiow visualizations of system state for security situational awareness. In Proceedings of the ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC '04), Washington, DC, USA, October 2004.
10. T. Takada and H. Koike. Mielog: A highly interactive visual log browser using information visualization and statistical analysis. In Proceedings of the Sixteenth Systems Administration Conference (LISA '02), Berkeley, CA, USA, November 2002.
11. T. Takada and H. Koike. Tudumi: Information visualization system for monitoring and auditing computer logs. In Proceedings of the Sixth International Conference on Information Visualisation (IV'02), London, England, UK, July 2002.
12. W. Yurcik. Visflowconnect-ip: A link-based visualization of netflows for security monitoring. In Proceedings of the Eighteenth Annual FIRST Conference on Computer Security Incident Handling, Baltimore, MD, USA, June 2006.