Visualising communication network security attacks

Proceedings of the International Conference on Information Visualisation

Volumn , Issue , 2007, Pages 726-733

  Musa, Shahrulniza ^a   Parish, David J ^a  

^a LOUGHBOROUGH UNIVERSITY   (United Kingdom)

Author keywords

Alarm visualization; Alert visualization; IDS alarms; Network security information visualization

Indexed keywords

DATA ACQUISITION; NETWORK SECURITY; REAL TIME SYSTEMS; TELECOMMUNICATION NETWORKS; THREE DIMENSIONAL;

ALARM VISUALIZATION; ALERT VISUALIZATION; DATA EXPLORATION; INFORMATION VISUALIZATION;

DATA VISUALIZATION;

EID: 35348837981     PISSN: 10939547     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IV.2007.149     Document Type: Conference Paper

References (21)

1. D. J. Parish, A. Pagonis, D. Barnet, J. M. Sandford and I. W. Phillips, "Presentation of real-time communication network measurement information," in IEE Proceedings. Science, Measurement and Technology, 2004, pp. 319-326.
2. S. K. Card, J. D. Mackinlay and B. Sheiderman, Readings in Information Visualisation: Using Vision to Think. San Francisco, CA: Morgan Kaufmann, 1999, pp. 686.
3. K. Abdullah, C. Lee, G. Conti and J. A. Copeland, "Visualizing network data for intrusion detection," in 2005, pp. 100-108.
4. R. F. Erbacher and D. Frincke, "Visualization in detection of intrusions and misuse in large scale networks," in 2000, pp. 294-299.
5. J. B. Colombe and G. Stephens, "Statistical profiling and visualization for detection of malicious insider attacks on computer networks," in VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, 2004, pp. 138-142.
6. H. Koike and K. Ohno, "SnortView: Visualization system of snort logs," in VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, 2004, pp. 143-147.
7. G. Vert, D. A. Frincke and J. C. McConnell. A visual mathematical model for intrusion detection, pp. 337. Available: "citeseer.ist.psu.edu/ vert98visual.html"
8. S. Lau, "The Spinning Cube of Potential Doom," Commun ACM, vol. 47, pp. 25-26, 2004.
9. K. Nyarko, T. Capers, C. Scott and K. Ladeji-Osias, "Network intrusion visualization with NIVA, an intrusion detection visual analyzer with haptic integration," in 2002, pp. 277-284.
10. K. Abdullah, C. P. Lee, G. Conti, J. A. Copeland and J. Stasko, "IDS Rainstorm: Visualizing IDS alarms," in Visualization for Computer Security, 2005. (VizSEC 05). IEEE Workshop on 2005, pp. 1-10.
11. J. Chartier. (2005, 13 April). SnortALog : Snort analyser logs. Available: http://jeremy.chartier.free.fr/snortalog/index.html# sample
12. Microsoft. Log parser. Available: http://www.logparser.com/
13. R. Danyliw. The analysis console for intrusion databases (ACID). Available: http://www.cert.org/kb/acid/
14. A. Komlodi, J. R. Goodall and W. G. Lutters, "An information visualization framework for intrusion detection," in CHI '04: CHI '04 Extended Abstracts on Human Factors in Computing Systems, 2004, pp. 1743.
15. A. Komlodi, P. Rheingans, Utkarsha Ayachit, J. R. Goodall and Amit Joshi, "A user-centered look at glyph-based security visualization," in Visualization for Computer Security, 2005. (VizSEC 05). IEEE Workshop on, 2005, pp. 21-28.
16. A. Dapos Amico and M. Kocka, "Information assurance visualizations for specific stages of situational awareness and intended uses: Lessons learned," in Visualization for Computer Security, 2005. (VizSEC 05). IEEE Workshop on, 2005, pp. 107-112.
17. G. Tedesco and U. Aickelin. (2006), Data reduction in intrusion alert correlation. WSEAS Transactions on Computers pp. 186-193. Available: http://eprints.nottingham.ac.uk/archive/00000365/
18. MaxMind LLC, "MaxMind, GeoIP," vol. 2006, 26 May 2006. 2006.
19. J. Viinikka, H. Debar, L. Me and R. Seguier, "Time series modeling for IDS alert management," in ASIACCS '06: Proceedings of the 2006 ACM Symposium on Information, Computer and Communications Security, 2006, pp. 102-113.
20. MIT Lincoln Laboratory. DARPA intrusion detection evaluation, pp. Last Date Accessed: 05/09/2005. Available: http://www.ll.mit.edu/IST/ideval/data/ data_index.html
21. IANA. (2006, 12-Mar-2006). Internet assigned numbers authority. [Online]. 2006(26-Jun-2006), pp. 1. Available: http://www.iana.org/assignments/protocol- numbers