FloVis: Flow visualization system

Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

Volumn , Issue , 2009, Pages 186-198

  Taylor, Teryl ^a   Paterson, Diana ^a   Glanfield, Joel ^a   Gates, Carrie ^b   Brooks, Stephen ^a   McHugh, John ^a  

^a DALHOUSIE UNIVERSITY   (Canada)

^b Sterling Software   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ACTIVITY DIAGRAM; COMMAND LINE; DISPLAY MODES; DRILL-DOWN; ENTERPRISE NETWORKS; FLOW VISUALIZATION SYSTEMS; FORENSIC ANALYSIS; HOST BEHAVIORS; NETFLOW; NETFLOW DATA; RELATIONAL DATABASE; SYSTEM SUPPORTS; VISUALIZATION TOOLS;

DATA VISUALIZATION; FLOW VISUALIZATION; SILK;

SECURITY OF DATA;

EID: 66249140932     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CATCH.2009.18     Document Type: Conference Paper

References (25)

1. IDS rainstorm: Visualizing IDS alarms. In VIZSEC '05: Proceedings of the IEEE Workshops on Visualization for Computer Security, Washington, DC, USA, 2005. (Pubitemid 44523242)
2. R. Ball, G. A. Fink, and C. North. Home-centric visualization of network traffic for security administration. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshopon Visualization and Data Mining for Computer Security, pages 55-64, Washington DC, USA, 2004.
3. F. Fischer, F. Mansmann, D. A. Keim, S. Pietzko, and M. Waldvogel. Large-scale network monitoring for visual analysis of attacks. In J. R. Goodall, G. J. Conti, and K.- L. Ma, editors, VizSEC, volume 5210 of Lecture Notes in Computer Science, pages 111-118. Springer, 2008. (Pubitemid 44523243)
4. F. Fischer, F. Mansmann, D. A. Keim, S. Pietzko, and M. Waldvogel. Large-scale network monitoring for visualanalysis of attacks. In J. R. Goodall, G. J. Conti, and K.-L. Ma, editors, VizSEC, volume 5210 of Lecture Notes in Computer Science, pages 111-118. Springer, 2008.
5. Generalized fisheye views. SIGCHI Bulletin,17(4):16-23, 1986.
6. C. Gates and J. McHugh. The contact surface: A technique for exploring internet scale emergent behaviors. In D. Zamboni, editor, Proceedings of the Fifth Conference on the Detection of Intrusions and Malware & Vulnerability Assessment, volume 5137 of Lecture Notes in Computer Science, pages 228-246, Paris, France, July 2008. Springer.
7. J. R. Goodall, W. G. Lutters, P. Rheingans, and A. Komlodi. Focusing on context in network traffic analysis. IEEE Computer Graphics Applications, 26(2):72-80, 2006.
8. P. Groce and J. Janies. Visualizations of flow and analytical results. Powerpoint presentation at FloCon, Jan 2008. A pdf of the slides is available from the FloCon 2008 web site, http://www.cert.org/flocon/2008/ proceedings.html, as of 21 October
9. Y. Hideshima and H. Koike. STARMINE: A visualization system for cyber attacks. In K. Misue, K. Sugiyama, and J. Tanaka, editors, APVIS, volume 60 of CRPIT, pages 131-138. Australian Computer Society, 2006. 197
10. D. Holten. Hierarchical edge bundles: Visualization of adjacency relations in hierarchical data. IEEE Transactions on Visualization and Computer Graphics, 12(5):741-748,2006.
11. A. Komlodi, P. Rheingans, U. Ayachit, J. R. Goodall, and A. Joshi. A user-centered look at glyph-based security visualization. In VIZSEC '05: Proceedings of the IEEE Workshops on Visualization for Computer Security, Washington, DC, USA, 2005. (Pubitemid 44523244)
12. K. Lakkaraju, W. Yurcik, and A. J. Lee. NVisionIP: Netflow visualizations of system state for security situational awareness. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, pages 65-72, Washington DC, USA, 2004.
13. S. Lau. The spinning cube of potential doom. Communications of the ACM, 47(6):25-26, 2004.
14. Y. K. Leung and M. D. Apperley. A review and taxonomy of distortion-oriented presentation techniques. ACM Transactions on Computer-Human Interactions, 1(2):126-160, 1994.
15. Mansmann, D. A. Keim, S. C. North, B. Rexroad, and D. Sheleheda. Visual analysis of network traffic for resource planning, interactive monitoring, and interpretation of securitythreats. IEEE Transactions on Visualization and Computer Graphics, 13 Paradigms, pages 3-10, Ascona, Switzerland, August 2003. (Pubitemid 350076578)
16. J. McHugh. Sets, bags, and rock and roll: Analyzing large data sets of network data. In P. Samarati, P. Y. A. Ryan, D. Gollmann, and R. Molva, editors, Proceedings of the 9th European Symposium on Research in Computer Security, volume 3193 of Lecture Notes in Computer Science, pages 407-422, Sophia Antipolis, France, September 2004.Springer. (Pubitemid 39738754)
17. J. McHugh and C. Gates. Locality: A new paradigm for thinking about normal behavior and outsider threat. In NSPW '03: Proceedings of the 2003 Workshop on New Security Paradigms, pages 3-10, Ascona, Switzerland, August 2003.
18. J. McHugh, C. Gates, and D. Becknel. Situational awareness and network traffic analysis. In Proceedings of the Gdansk NATO Workshop on Cyberspace Security and Defence: Research Issues, volume 196 of NATO Science Series II. Mathematics, Physics, and Chemistry, pages 209 - 228, Gdansk, Poland, September 2004.
19. J. McPherson, K.-L. Ma, P. Krystosk, T. Bartoletti, and M. Christensen. PortVis: A tool for port-based detection of security events. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, pages73-81, Washington DC, USA, 2004
20. J. Oberheide, M. Goff, and M. Karir. Flamingo: Visualizing internet traffic. In Proceedings of the 10th IEEE/IFIP Network Operations and Management Symposium, pages 150-161, 2006. (Pubitemid 46948676)
21. D. Phan, J. Gerth, M. Lee, A. Paepcke, and T.Winograd. Visual analysis of network flow data with timelines and event plots. In J. R. Goodall, G. Conti, and K. L. Ma, editors, VizSEC 2007: Proceedings of the Workshop on Visualization for Computer Security, pages85-99. Springer, 2008. 10.1007/978-3-540-78243-8 6.
22. R. A. Rensink, J. K. O'Regan, and J. J. Clark. To see or not to see: The need for attention to perceive changes in scenes. Psychological Science, 8:368-373, 1997. (Pubitemid 127455296)
23. T. Taylor, S. Brooks, and J. McHugh. NetBytes viewer: An entity-based netflow visualization utility for identifying intrusive behavior. In VizSEC 2007: Proceedings of the 2007Workshop on Visualization for Computer Security, Sacramento, USA, 2008.
24. C. Ware. Information Visualization: Perception for Design. Morgan Kaufmann Publishers Inc., San Francisco, CA, USA, 2000.
25. X. Yin, W. Yurcik, M. Treaster, Y. Li, and K. Lakkaraju. VisFlowConnect: Netflow visualizations of link relationships for security situational awareness. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, Washington DC, USA, 2004.