Nimble cybersecurity incident management through visualization and defensible recommendations

ACM International Conference Proceeding Series

Volumn , Issue , 2010, Pages 102-113

  Rasmussen, Jamie ^a   Ehrlich, Kate ^a   Ross, Steven ^a   Kirk, Susanna ^a   Gruen, Daniel ^a   Patterson, John ^a  

^a IBM RESEARCH   (United States)

Author keywords

information visualization; managed security services; user studies

Indexed keywords

DECISION MAKING; INFORMATION SYSTEMS; INTRUSION DETECTION; NETWORK SECURITY; REAL TIME SYSTEMS;

DECISION MAKING PROCESS; GRAPH-BASED VISUALIZATION; INFORMATION VISUALIZATION; INTRUSION DETECTION SYSTEMS; MANAGED SECURITY SERVICES; QUANTITATIVE RESULT; REAL TIME MONITORING; USER STUDY;

VISUALIZATION;

EID: 78149452270     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1850795.1850807     Document Type: Conference Paper

References (23)

1. Abdullah, K., Lee, C., Conti, G., Copeland, J. A., and Stasko, J. 2005. IDS RainStorm: Visualizing IDS Alarms. In Proceedings of the IEEE Workshops on Visualization For Computer Security (October 26 - 26, 2005). VIZSEC. IEEE Computer Society, Washington, DC, 1. DOI=http://dx.doi.org/10.1109/VIZSEC.2005.8
2. Bechhofer, S., van Harmelen, F., Hendler, J., Horrocks, I., McGuinness, D. L., Patel-Schneider, P. F., and Stein, L. A. 2004. OWL Web Ontology Language Reference. W3C Recommendation, 10 February 2004. Available at http://www.w3.org/TR/owl-ref/
3. Bederson, B. B., Grossjean, J., and Meyer, J. 2004. Toolkit Design for Interactive Structured Graphics. IEEE Trans. Softw. Eng. 30, 8 (August 2004), 535-546. DOI=10.1109/TSE.2004.44 http://dx.doi.org/10.1109/TSE.2004.44
4. Bilgic, M. and Mooney, R.J. Explaining recommendations: Satisfaction vs. promotion. In Proceedings of Beyond Personalization Workshop, IUI, 2005.
5. Collins, C., Penn, G., and Carpendale, S. 2009. Bubble Sets: Revealing Set Relations with Isocontours over Existing Visualizations. IEEE Transactions on Visualization and Computer Graphics 15, 6 (Nov. 2009), 1009-1016. DOI=http://dx.doi.org/10.1109/TVCG.2009.122
6. Fan, J., Xu, J., Ammar, M. H., and Moon, S. B. 2004. Prefixpreserving IP address anonymization: measurement-based security evaluation and a new cryptography-based scheme. Computer Networks, Volume 46, Issue 2 (October 2004), 253-272, Elsevier.
7. Goodall, J. R. 2009. Visualization is Better! A Comparative Evaluation. Proceedings of the Workshop on Visualization for Computer Security (VizSec), IEEE Press, 2009, 57-68.
8. Goodall, J. R., Lutters, W.G., and Komlodi, A. 2004. The Work of Intrusion Detection: Rethinking the Role of Security Analysts. Proceedings of the Americas Conference on Information Systems (AMCIS), AIS Press, 2004, 1421-1427.
9. Gotz, D. and Zhou, M. 2008. Characterizing Users' Visual Analytic Activity for Insight Provenance. IEEE Visual Analytics Science and Technology (VAST), Columbus, Ohio (2008).
10. Hearst, M. 2008. UIs for Faceted Navigation: Recent Advances and Remaining Open Problems. Proc. 2008 Workshop on Human-Computer Interaction and Information Retrieval.
11. Herlocker, J. L., Konstan, J. A., and Riedl, J. 2000. Explaining collaborative filtering recommendations. In Proceedings of the 2000 ACM Conference on Computer Supported Cooperative Work (Philadelphia, Pennsylvania, United States). CSCW '00. ACM, New York, NY, 241-250. DOI= http://doi.acm.org/ 10.1145/358916.358995
12. Koike, H. and Ohno, K. 2004. SnortView: visualization system of snort logs. In Proceedings of the 2004 ACM Workshop on Visualization and Data Mining For Computer Security (Washington DC, USA, October 29 - 29, 2004). VizSEC/DMSEC '04. ACM, New York, NY, 143-147. DOI=http://doi.acm.org/10.1145/1029208.1029232
13. Komlodi, A., Goodall, J. R., and Lutters, W. G. 2004. An Information Visualization Framework for Intrusion Detection. In CHI '04 Extended Abstracts on Human Factors in Computing Systems (Vienna, Austria, April 24 - 29, 2004). CHI '04. ACM, New York, NY, 1743. DOI=http://doi.acm.org/10.1145/985921.1062935
14. Leeson, P. and Coyne, C. 2005. The Economics of Computer Hacking. Journal of Law, Economics and Policy 1(2) 2005: 511-532.
15. Livnat, Y., Agutter, J., Moon, S., Erbacher, R. F., and Foresti, S. 2005. A Visualization Paradigm for Network Intrusion Detection. Proc. IEEE Workshop on Information Assurance and Security. IEEE CS Press, 2005, pp. 92-99.
16. Lutters, W. G. and Ackerman, M. S. 2007. Beyond Boundary Objects: Collaborative Reuse in Aircraft Technical Support. Comput. Supported Coop. Work 16, 3 (Jun. 2007), 341-372.
17. Luo, B. and Hancock, E. R. 2001. Structural Graph Matching Using the EM Algorithm and Singular Value Decomposition. IEEE Trans. Pattern Anal. Mach. Intell. 23, 10 (Oct. 2001), 1120-1136. DOI= http://dx.doi.org/10.1109/34.954602
18. Pietraszek, T. 2004 Using Adaptive Alert Classification to Reduce False Positives in Intrusion Detection. In Recent Advances in Intrusion Detection (RAID2004), volume 3324 of Lecture Notes in Computer Science, 102-124, Sophia Antipolis, France, 2004. Springer-Verlag.
19. Pu, P. and Chen, L. 2006. Trust building with explanation interfaces. In Proceedings of the 11th international Conference on intelligent User interfaces (Sydney, Australia, January 29 - February 01, 2006). IUI '06. ACM, New York, NY, 93-100. DOI=http://doi.acm.org/10.1145/1111449.1111475
20. Thompson, R. S., Rantanen, E. M., Yurcik, W., and Bailey, B. P. 2007. Command line or pretty lines?: comparing textual and visual interfaces for intrusion detection. In Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (San Jose, California, USA, April 28 - May 03, 2007). CHI '07. ACM, New York, NY, 1205. DOI=http://doi.acm.org/10.1145/1240624.1240807
21. Tintarev, N. and Masthoff, J. 2007. A Survey of Explanations in Recommender Systems. In Proceedings of the 2007 IEEE 23rd international Conference on Data Engineering Workshop (April 17 - 20, 2007). ICDEW. IEEE Computer Society, Washington, DC, 801-810. DOI=http://dx.doi.org/10.1109/ICDEW. 2007.4401070
22. Vig, J., Sen, S., and Riedl, J. 2009. Tagsplanations: explaining recommendations using tags. In Proceedings of the 13th international Conference on intelligent User interfaces (Sanibel Island, Florida, USA, February 08 - 11, 2009). IUI '09. ACM, New York, NY, 47-56. DOI=http://doi.acm.org/10.1145/ 1502650.1502661
23. Warm, J. S., Dember, W. N., and Hancock, P. A. 1996. Vigilance and Workload in Automated Systems. In R. Parasuraman & M. Mouloua (Eds), Automation and Human Performance: Theory and Applications, 183-200. Mahwah, NJ: Erlbaum.