Visualizing netflows for security at line speed: The sift tool suite

LISA 2005 - 19th Large Installation System Administration Conference

Volumn , Issue , 2005, Pages 169-176

  Yurcik, William ^a  

^a National Center for Supercomputing Applications

Author keywords

[No Author keywords available]

Indexed keywords

DATA REDUCTION; DRILLING MACHINES (MACHINE TOOLS); DRILLS; INFILL DRILLING; VISUALIZATION;

COGNITIVE PROCESS; INTERNET COMMUNITIES; MEASUREMENT SECURITIES; PRODUCTION ENVIRONMENTS; SECURITY MEASUREMENT; SYSTEM ADMINISTRATORS; USABILITY TESTING; VISUALIZATION TOOLS;

INTERNET PROTOCOLS;

EID: 38149097985     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. Bearavolu, Ratna, Kiran Lakkaraju, and William Yurcik, "NVisionIP: An Animated State Analysis Tool for Visualizing NetFlows," FLOCON, 2005
2. Bullard, Carter, Argus, the network Audit Record Generation and Utilization System, http://www. qosient.com/argus/ , accessed 26 September, 2005
3. Bullard, Carter, Argus Record Format, http:// www.qosient.com/argus/argus.5.htm/ , accessed 26 September, 2005
4. Cisco Systems, Cisco NetFlow Services and Applications White Paper, http://www.cisco.com/ warp/public/cc/pd/iosw/ioft/neflct/tech/napps-wp.htm , accessed 26 September, 2005
5. Cisco Systems, NetFlow Overview Presentation, http://www.cisco.com/application/vnd.mspower point/en/us/guest/tech/tk362/c1482/ccmigration-09186a0080182b50.ppt , accessed 26 September, 2005
6. Lakkaraju, Kiran, William Yurcik, Adam J. Lee, Ratna Bearavolu, Yifan Li, and Xiaoxin Yin, "NVisionIP: NetFlow Visualizations of System State for Security Situational Awareness," CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004
7. Li, Yifan, Adam Slagell, Katherine Luo, and William Yurcik, "CANINE: A Combined Converter and Anonymizer Tool for Processing Net-Flows for Security," International Conference on Telecommunication Systems ? Modeling and Analysis (ICTSM), 2005
8. Luo, Katherine, Yifan Li, Adam Slagell, and William Yurcik, "CANINE: A NetFlows Converter/ Anonymizer Tool for Format Interoperability and Secure Sharing," FLOCON, 2005
9. SIFT Project Webpage, http://www.ncassr.org/ projects/sift/ , accessed 26 September, 2005
10. Tufte, Edward, A One-Day Course: Presenting Data and Information, Madision WI, (http://www. edwardtufte.com/tufte/courses , accessed 26 September, 2005), August, 2005
11. Vi z S E C Community Homepage, http://www.ncassr. org/projects/sift/vizsec/ , accessed 26 September, 2005
12. Yin, Xiaoxin, William Yurcik, and Adam Slagell, "VisFlowConnect-IP: An Animated Link Analysis Tool for Visualizing NetFlows," FLOCON, 2005
13. Yin, Xiaoxin, William Yurcik, and Adam Slagell, "The Design of VisFlowConnect-IP: A Link Analysis System for IP Security Situational Awareness," Third IEEE International Workshop on Information Assurance (IWIA), 2005
14. Yin, Xiaoxin, William Yurcik, Michael Treaster, Yifan Li, and Kiran Lakkaraju, "VisFlowConnect: NetFlow Visualizations of Link Relationships for Security Situational Awareness," CCS Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC), 2004
15. Yurcik, William and Yifan Li, "Case Study: Instrumenting a Network for NetFlow Security Visualization Tools," 21st Annual Computer Security Applications Conference (ACSAC), 2005
16. Yurcik, William, Kiran Lakkaraju, James Barlow, and Jeff Rosendale, "A Prototype Tool for Visual Data Mining of Network Traffic for Intrusion Detection," Workshop on Data Mining for Computer Security (DMSEC), 2003
17. Yurcik, William, James Barlow, and Jeff Rosendale, "Maintaining Perspective on Who Is The Enemy in the Security Systems Administration of Computer Networks," ACM CHI Workshop on System Administrators Are Users, Too: Designing Workspaces for Managing Internet-Scale Systems, 2003
18. Yurcik, William, James Barlow, Kiran Lakkaraju, and Mike Haberman, "Two Visual Computer Network Security Monitoring Tools Incorporating Operator Interface Requirements," ACM CHI Workshop on Human-Computer Interaction and Security Systems (HCISEC), 2003