An intelligent, interactive tool for exploration and visualization of time-oriented security data

Proceedings of the 3rd International Workshop on Visualization for Computer Security, VizSEC'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 15-22

  Shabtai, Asaf ^a   Klimov, Denis ^a   Shahar, Yuval ^a   Elovici, Yuval ^a  

^a BEN GURION UNIVERSITY OF THE NEGEV   (Israel)

Author keywords

Human computer interaction; Intelligent visualization; Knowledge based systems; Security; Temporal abstraction

Indexed keywords

AUTOMATION; COMPUTER ARCHITECTURE; COMPUTER VIRUSES; HUMAN COMPUTER INTERACTION; INTERACTIVE COMPUTER GRAPHICS; KNOWLEDGE BASED SYSTEMS;

DISTRIBUTED ARCHITECTURE; INTELLIGENT VISUALIZATION; TEMPORAL ABSTRACTION; TIME-ORIENTED SECURITY DATA;

SECURITY OF DATA;

EID: 34547337787     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179576.1179580     Document Type: Conference Paper

References (30)

1. Abdullah K., Lee C., Conti G., Copeland J. A. and Stasko J. IDS RainStorm: Visualizing IDS Alarms. Workshop on Visualization for Computer Security (VizSEC05), USA, 2005.
2. Conti G. et al. Countering Security Analyst and Network Administrator Overload Through Alert and Packet Visualization. IEEE Computer Graphics and Applications, March 2006.
3. th European Conference on Information Warfare and Security (ECIW2006), Finland, June 2006.
4. Shahar Y. A framework for knowledge-based temporal abstraction. Artificial Intelligence, 90(1.2): 79.133, 1997.
5. Shahar Y. and Musen M.A. Knowledge-based temporal abstraction in clinical domains. Artificial Intelligence in Medicine 8(3): 267.298. 1996.
6. Shahar Y. Dynamic temporal interpretation contexts for temporal abstraction. Annals of Mathematics and Artificial Intelligence. 22(1-2): 159-92, 1998.
7. Martins S.B., Shahar Y. et al. Evaluation of KNAVE-II: A tool for intelligent query and exploration of patient data. Proceedings of Medinfo 2004, San Francisco, CA, September, 2004.
8. Conti G. Malware Cinema: A Picture is Worth a Thousand Packets. Black Hat Europe, March 2006.
9. Conti G. Network Attack Visualization. DEFCON 12, August 2004.
10. Abdullah K., Lee C., Conti G. and Copeland J. Visualizing Network Data for Intrusion Detection. IEEE Information Assurance Workshop (IAW), 2005.
11. Erbacher R.F., Kim C. and Sundberg A. Designing Visualization Capabilities for IDS Challenges. Proceedings of the IEEE Visualization for Computer Security, 2005.
12. Yin X., Yurcik W., Li Y., Lakkaraju K., and Abad C. Visflow - connect: Providing security situational awareness by visualizing network traffic flows. Proceedings of the Workshop on Information Assurance (WIA04), 2004.
13. Lakkaraju K., Yurcik W. and Lee A. J. NVisionIP: NetFlow Visualizations of System State for Security Situational Awareness. Proceedings of CCS Workshop on Visualization and Data Mining for Computer Security, 2004.
14. Lakkaraju K., Bearavolu R., Slagell A., Yurcik W. and North S. Closing-the-loop in NVisionIP: integrating discovery and search in security visualizations. Workshop on Visualization for Computer Security (VizSEC05), October, 2005.
15. McPherson J., Ma K. L., Krystosek P., Bartoletti T. and Muelder C. PortVis: A Tool for Port-Based Detection of Security Events. Proceedings of CCS Workshop on Visualization and Data Mining for Computer Security, 2004.
16. Muelder C., Ma. K. L. and Bartoletti T. Interactive Visualization for Network and Port Scan Detection. Proceedings of RAID 2005, September, 2005.
17. Oline A. and Reiners D. Exploring Three-dimensional Visualization for Intrusion Detection. Workshop on Visualization for Computer Security (VizSEC05), October, 2005.
18. Conti G., Grizzard J., Ahamad M. and Owen H. Visual Exploration of Malicious Network Objects Using Semantic Zoom, Interactive Encoding and Dynamic Queries. Workshop on Visualization for Computer Security (VizSEC05), October 2005.
19. Muelder C., Ma K.L., Bartoletti T. A Visualization Methodology for Characterization of Network Scans. Workshop on Visualization for Computer Security (VizSEC05), October, 2005.
20. Colombe J.B. and Stephens G. Statistical Profiling and Visualization for Detection of Malicious Insider Attacks on Computer Networks. ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC04), 2004.
21. Koike H. and Ohno K. SnortView: Visualization System of Snort Logs. ACM Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC04), USA, 2004.
22. Snort - An open source network intrusion prevention and detection system, http://www.snort.org/.
23. Ankerst M., Jones D.H., Kao A. and Wang C. DataJewel: Tightly integrating visualization with temporal data mining. ICDM Workshop on Visual Data Mining, 2003.
24. Bade R., Schlechtweg S. and Miksch S. Connecting time-oriented data and information to a coherent interactive visualization. CHI2004:ACMPress, 2004, pp. 105-112.
25. Buono P., Aris A., Plaisant C., Khella A. and Shneiderman B. Interactive pattern search in time series. Conference on Visual Data Analysis, January 2005.
26. Hochheiser H. and Shneiderman B. Dynamic query tools for time series data sets: Timebox widgets for interactive exploration. Information Visualization, vol. 3, pp. 1-18, 2004.
27. Chittaro L. and Combi C. Visualizing queries on databases of temporal histories: new metaphors and their evaluation. Data and Knowledge Engineering, vol. 44, pp. 239-264, 2003.
28. Klimov D. and Shahar Y. A Framework for Intelligent Visualization of Multiple Time-Oriented Medical Records. AMIA, 2005.
29. Spokoiny A., and Shahar Y. Momentum - an active time-oriented database for intelligent abstraction, exploration and analysis of clinical data. Proceeding of the workshop on Intelligent Data Analysis in Medicine and Pharmacology (IDAMAP2003), Cyprus, 2003.
30. Spokoiny A. and Shahar Y. Momentum - An active time-oriented database for intelligent abstraction, exploration and analysis of clinical data. Medical Informatics (MEDINFO). San Francisco, 2004.