LogView: Visualizing event log clusters

Proceedings - 6th Annual Conference on Privacy, Security and Trust, PST 2008

Volumn , Issue , 2008, Pages 99-108

  Makanju, Adetokunbo ^a   Brooks, Stephen ^a   Zincir Heywood, A Nur ^a   Milios, Evangelos E ^a  

^a DALHOUSIE UNIVERSITY   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

HIERARCHICAL STRUCTURES; LOG FILE; NETWORK ADMINISTRATOR; SECURITY ISSUES; SPEED-UP; TREE-MAPS; VISUALIZATION TOOLS;

CLUSTER ANALYSIS; CLUSTERING ALGORITHMS; NETWORK MANAGEMENT; VISUALIZATION;

SECURITY OF DATA;

EID: 67650085577     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PST.2008.17     Document Type: Conference Paper

References (22)

1. R. Vaarandi, "A Data Clustering Algorithm for Mining Patterns from Event Logs," in Proceedings of the 3rd IEEE Workshop on IP Operations and Management. Kansas City, MO, USA.: IEEE Press, October 2003, pp. 119 - 126.
2. -, "Simple Logfile Clustering Tool : http://kodu.neti.ee/ risto/slct/," Accessed from the web., 2003.
3. R. Marty, "Afterglow Project Home: http://afterglow.sourceforge.net, " Accessed from the web., 2008.
4. H. Kioke and K. Ohno, "SnortView: Visualization System of Snort Logs," in CCS Workshop on Visualization and Data Mining for Computer Security. Washington, DC, USA.: ACM Press, October 2004, pp. 143 - 147.
5. R. Ball, G. Fink, and C. North, "Home-centric visualization of network security traffic for security administration," in CCS Workshop on Visualization and Data Mining for Computer Security. Washington, DC, USA: ACM Press, October 2004, pp. 55 - 64.
6. H. Lam, D. Russell, D. Tang, and T. Munzner, "Session viewer: Visual exploratory analysis of web session logs," in IEEE Symposium on Visual Analytics Science and Technology. IEEE Press, November 2007, pp. 147 - 154.
7. F. Mansmann, D. Keim, S. North, B. Rexroad, and D. Sheleheda, "Visual Analysis of Network Traffic for Resource Planning, Interactive Monitoring and Interpretation of Security Threats." IEEE Transactions on Visualization and Computer Graphics, vol. 13, no. 6, pp. 1105 - 1112, December 2007.
8. B. Schneiderman, "Tree Visualisation With Tree-maps: a 2-D space filling approach." ACM Transactions on Graphics, vol. II, no. 1, pp. 92-99, January 1992.
9. M. Frohlich and M. Werner, "The graph visualization system da vinci - a user interface for applications," Department of Computer Sceince, University of Bremen, Germany., Tech. Rep., 1994.
10. Sourcefire-Inc, "Snort - the de facto standard for intrusion detection/ prevention, http://www.snort.org," Retrieved from the Web., September 2007.
11. R. Agrawal, J. Gehrke, D. Gunopulos, and P. Raghavan, "Automatic Subspace Clustering of High Dimensional Data for Data Mining Applications," in ACM SIGMOID International Conference on Management of Data, 1998, pp. 94 - 105.
12. S. Guha, R. Rastogi, and K. Shim, "CURE: An efficient clustering algorithm for large databases." in ACM SIGMOD International Conference on Management of Data, June 1998, pp. 73-84.
13. S. Goil, H. Nagesh, and A. Choudhary, "MAFIA: Efficient and Scalable Subspace Clustering for Very Large Data Sets," Northwestern University," Technical Report No. CPDC-TR-9906-010, 1999.
14. J. Bellec and T. Kechadi, "CUFRES: Clustering Using Fuzzy Representative Events Selection for the Fault Recognition Problem in Telecommunication Networks," in ACM International Conference on Information and Knowledge Management (Phd Workshop). ACM Press, November 2007, pp. 55 - 62.
15. G. Hendry and S. Yang, "Intrusion signature creation via clustering anomalies," in Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security 2008. Edited by Dasarathy, Belur V. Proceedings of the SPIE, Volume 6973, pp. 69730C-69730C-12 (2008)., March 2008.
16. B. Bederson, B. Shneiderman, and M. Wattenberg, "Ordered and Quantum Treemaps: Making Effective Use of 2D Space to Display Hierarchies," ACM Transactions on Graphics, vol. 21, no. 4, pp. 833 - 854, October 2002.
17. Precarn, "Netpal: Dynamic Network Admininstration, http://www.precarn.ca/products/projects/phase4/prjdusdcqkoyy.html," Accessed from the Web., May 2008.
18. J. Heer, "prefuse - interactive information visualisation toolkit, http://www.prefuse.org," February 2008.
19. U. o. M. HCI Lab, "Piccolo Toolkit: A Structured 2D Graphics Framework, http://www.cs.umd.edu/hcil/piccolo/," Accessed from the web, March 2008.
20. J. Fekete, "The Infovis Toolkit," in InfoVis 2004, 2004, pp. 167 - 174.
21. J. Heer, S. Card, and J. Landay, "prefuse: a toolkit for interactive information visualisation," in Proceedings of the Sigchi Conference on Human Factors in Computing, New York, 2005, pp. 421 - 430.
22. E. H. Chi, "A Taxonomy of Visualization Techniques Using the Data State Reference Model," in InfoVis 2000, 2000, pp. 69 - 75.