Network intrusion detection cognitive task analysis: Textual and visual tool usage and recommendations

Proceedings of the Human Factors and Ergonomics Society

Volumn , Issue , 2006, Pages 669-673

  Thompson, Ramona Su ^a   Rantanen, Esa M ^a   Yurcik, William ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COGNITIVE SYSTEMS; COMPUTER NETWORKS; DATA VISUALIZATION; INFORMATION MANAGEMENT; INFORMATION RETRIEVAL; NETWORK SECURITY; USER INTERFACES;

COGNITIVE WORKLOAD; TASK ANALYSIS; VISUALIZATION TOOLS;

INTRUSION DETECTION;

EID: 44349090241     PISSN: 10711813     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (14)

1. Ball, R., Fink, G. A., & North, C. (2004, Oct. 29). Home-centric visualization of network traffic for security administration. VizSEC/DMSEC, 55-64.
2. D'Amico, A., & Kocka, M. (2005, Oct. 26). Information assurance visualizations for specific stages of situational awareness and intended uses: Lessons learned. VizSEC, 107-112.
3. Goodall, J. R. (2005, June 15-17). User requirements and design of a visualization for intrusion detection analysis. IEEE Workshop on Information Assurance and Security, 394-401.
4. Goodall, J., Lutters, W., & Komlodi, A. (2004a). I know my network: collaboration and expertise in intrusion detection. CSCW, 342-345.
5. Goodall, J., Lutters, W., & Komlodi, A. (2004b, Aug 6-8). The work of intrusion detection: Rethinking the role of security analysts. AMCIS, 1421-1427.
6. Goodall, J. R., Lutters, W. G., Rheingans, P., & Komlodi, A. (2005, Oct 26). Preserving the big picture: Visual network traffic analysis with TNV. VizSEC, 47-54.
7. Goodall, J. R., Ozok, A. A., Lutters, W. G., Rheingans, P., & Komlodi, A. (2005, Apr 2-7). A user-centered approach to visualizing network traffic for intrusion detection. Extended Abstracts CHI, 1403-1406.
8. Julisch, K., & Dacier, M. (2002, Jul 23-26). Mining intrusion detection alarms for actionable knowledge. KDD, 366-375.
9. Kandogan, E., & Haber, E. (2005). Security administration tools and practices. In L. Cranon & S. Garfinkel (Eds.), Security and Usability: Designing Secure Systems that People Can Use (pp. 357-376). Beijing: O'Reilly.
10. Killcrece, G., Kossakowski, K., Ruefle, R., & Zajicek, M. (2003). State of the Practice of Computer Security Response Teams (CSIRTs) (No. CMU/SEI-2003-TR-001): Carnegie Mellon Software Engineering Institute (SEI).
11. Komlodi, A., Goodall, J. R., & Lutters, W. G. (2004, Apr 24-29). An information visualization framework for intrusion detection. Ext. Abstr. CHI, 1743.
12. Lakkaraju, K., Bearavolu, R., & Yurcik, W. (2003). NVisionIP - A traffic visualization tool for security analysis of large and complex networks. International Multiconference on Measurement, Modeling, and Evaluation of Computer-Communications Systems.
13. Yin, X., Yurcik, W., Li, Y., Lakkaraju, K., & Abad, C. (2004, Apr 15-17). VisFlowConnect: Providing security situational awareness by visualizing network traffic flows. IPCCC, 601-607.
14. Yurcik, W., Barlow, J., & Rosendale, J. (2003). Maintaining perspective on who is the enemy in the security systems administration of computer networks. ACM CHI Workshop on System Administrators Are Users, Too: Designing Workspaces for Managing Internet-Scale Systems.