Histogram Matrix: Log file visualization for anomaly detection

ARES 2008 - 3rd International Conference on Availability, Security, and Reliability, Proceedings

Volumn , Issue , 2008, Pages 610-617

  Frei, Adrian ^a,b   Rennhard, Marc ^a  

^a ZURICH UNIVERSITY OF APPLIED SCIENCES   (Switzerland)

^b Columbia University ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; FINANCIAL DATA PROCESSING; MATRIX ALGEBRA; SENSORS; STATISTICAL METHODS; VISUALIZATION;

ANOMALY DETECTIONS; ANOMALY-BASED INTRUSION DETECTION; INTERNATIONAL CONFERENCES; LOG FILES; LOG-FILE ANALYSIS; REAL ENVIRONMENTS; SECURITY ADMINISTRATORS; STATISTICAL TECHNIQUES; TEXTUAL DATA; VISUALIZATION TECHNIQUES;

INTRUSION DETECTION;

EID: 49049106372     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2008.148     Document Type: Conference Paper

References (15)

1. C. Abad, J. Taylor, C. Sengul, W. Yurcik, Y. Zhou, and K. Rowe. Log correlation for intrusion detection: A proof of concept. In Proceedings of the 19th Annual Computer Security Applications Conference (ACSAC), Washington, DC, USA, 2003.
2. D. Anderson, T. Frivold, and A. Valdes. Next-generation intrusion detection expert system (NIDES): A summary, May 1995.
3. L. Girardin and D. Brodbeck. A Visual Approach for Monitoring Logs. USENIX Association, Boston, Massachusetts, 1998.
4. S. E. Hansen and E. T. Atkins. Automated system monitoring and notification with swatch. Proceedings of the Seventh Systems Administration Conference (LISA VII) (USENIX Association: Berkeley, CA), page 145, 1993.
5. C. C. Holt. Forecasting seasonals and trends by exponentially weighted moving averages. International Journal of Forecasting, 20:5-10, 2004.
6. R. Kasemsri. A survey, taxonomy, and analysis of network security visualization techniques. Master′s thesis, Georgia State University, 11 2005.
7. W. Lee and S. Stolfo. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, 1998.
8. B. Shneiderman. The eye have it: A task by data type taxonomy for information visualizations, 1996.
9. J. Stearley. Towards informatic analysis of syslogs. In Cluster Computing, 2004 IEEE International Conference on, pages 309-318, 2004.
10. T. Takada and H. Koike. MieLog: A Highly Interactive Visual Log Browser Using Information Visualization and Statistical Analysis. USENIX Association, Philadelphia, PA, 2002.
11. T. Takada and H. Koike. Tudumi: information visualization system for monitoring and auditing computer logs. In Information Visualisation, 2002. Proceedings. Sixth International Conference on, pages 570-576, 2002.
12. S. T. Teoh, K.-L. Ma, S. F. Wu, and T. Jankun-Kelly. Detecting flaws and intruders with visual data analysis. Computer Graphics and Applications, IEEE, 24:27-35, Sep-Oct 2004.
13. R. Vaarandi. Sec - a lightweight event correlation tool. In IP Operations and Management, 2002 IEEE Workshop on, pages 111-115, 2002.
14. R. Vaarandi. A data clustering algorithm for mining patterns from event logs. In IP Operations and Management, 2003. (IPOM 2003). 3rd IEEE Workshop on, pages 119-126, 2003.
15. K. Yamanishi and Y. Maruyama. Dynamic syslog mining for network failure monitoring. ACM Press, Chicago, Illinois, USA, 2005.