Applied parallel coordinates for logs and network traffic attack analysis

Journal in Computer Virology

Volumn 6, Issue 1, 2010, Pages 1-29

  Tricaud, Sebastien ^a   Saadé, Philippe ^b  

^a Honeynet Project French Chapter   (France)

^b Laboratoire de Mathématiques   (France)

Author keywords

Computer security; Data mining; Logs; Parallel coordinates; Visualization

Indexed keywords

ABNORMAL BEHAVIOR; ALERT SYSTEMS; ATTACK ANALYSIS; COMPUTER SECURITY; CONVERGENCE BEHAVIORS; DATA CORRELATIONS; DESCRIPTION LANGUAGES; ITS ARCHITECTURE; LINE PATTERN; LOGS; MATHEMATICAL THEORY; NETWORK TRAFFIC; PARALLEL COORDINATES;

NETWORK SECURITY; SECURITY SYSTEMS; VISUALIZATION;

DATA VISUALIZATION;

EID: 74849112056     PISSN: 17729890     EISSN: 17729904     Source Type: Journal    
DOI: 10.1007/s11416-009-0127-3     Document Type: Article

References (11)

1. Conti, G., Abdullah, K.: Passive visual fingerprinting of network attack tools. In: VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, pp. 45-54. ACM, New York, NY, USA (2004).
2. Gansner E. R., Koutsofios E., North S. C., Phong Vo K.: A technique for drawing directed graphs. IEEE Trans. Softw. Eng. 19, 214-230 (1993).
3. Grinstein, G., Mihalisin, T., Hinterberger, H., Inselberg, A.: Visualizing multidimensional (multivariate) data and relations. In: VIS '94: Proceedings of the Conference on Visualization '94, pp. 404-409. IEEE Computer Society Press, Los Alamitos, CA, USA (1994).
4. Hamming R.: Error detecting and error correcting codes. Bell Syst. Tech. J. 29, 147-160 (1950).
5. Holz, T., Steiner, M., Dahl, F., Biersack, E., Freiling, F.: Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm. In: LEET'08: Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, pp. 1-9. USENIX Association, Berkeley, CA, USA (2008).
6. Inselberg, A., Avidan, T.: The automated multidimensional detective. In: INFOVIS '99: Proceedings of the 1999 IEEE Symposium on Information Visualization, p. 112. IEEE Computer Society, Washington, DC, USA (1999).
7. Inselberg, A., Avidan, T.: Classification and visualization for high-dimensional data. In: KDD '00: Proceedings of the Sixth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 370-374. ACM, New York, NY, USA (2000).
8. Inselberg, A., Dimsdale, B.: Parallel coordinates for visualizing multi-dimensional geometry. In: CG International '87 on Computer Graphics 1987, pp. 25-44. Springer, New York, NY, USA (1987).
9. Inselberg A., Dimsdale B.: Multidimensional lines ii: proximity and applications. SIAM J. Appl. Math. 54(2), 578-596 (1994).
10. Levenshtein, V. I.: Binary codes capable of correcting deletions, insertions, and reversals. Tech. Rep. 8 (1966).
11. Stubblefield A., Ioannidis J., Rubin A. D.: A key recovery attack on the 802. 11b wired equivalent privacy protocol (wep). ACM Trans. Inf. Syst. Secur. 7(2), 319-332 (2004).