Visualizing graph dynamics and similarity for enterprise network security and management

ACM International Conference Proceeding Series

Volumn , Issue , 2010, Pages 34-45

  Liao, Qi ^a   Striegel, Aaron ^a   Chawla, Nitesh ^a  

^a University of Notre Dame   (United States)

Author keywords

enterprise networks; graphs; local context; policy assessment; security; visual graph data mining; visualization

Indexed keywords

DATA MINING; DATA VISUALIZATION; DYNAMICS; FLOW VISUALIZATION; GRAPH THEORY; HIERARCHICAL CLUSTERING; VISUALIZATION;

ENTERPRISE NETWORKS; GRAPHS; LOCAL CONTEXTS; POLICY ASSESSMENT; SECURITY; VISUAL GRAPH;

NETWORK SECURITY;

EID: 78149458354     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1850795.1850799     Document Type: Conference Paper

References (31)

1. J.R. Goodall, W.G. Lutters, P. Rheingans, and A. Komlodi. Focusing on context in network traffic analysis. IEEE Computer Graphics and Applications, 26(2):72-80, March/April 2006.
2. Gregory Conti. Rumint - open source network and security visualization tool. http://www.rumint.org.
3. P. Minarik and T. Dymacek. Netflow data visualization based on graphs. In Proc. of 5th International Workshop on Visualization for Computer Security (VizSec'08), pages 144-151, Cambridge, MA, September 15 2008.
4. F. Fischer, F. Mansmann, D.A. Keim, S. Pietzko, and M. Waldvogel. Large-scale network monitoring for visual analysis of attacks. In Proc. of 5th International Workshop on Visualization for Computer Security (VizSec'08), pages 111-118, Cambridge, MA, September 15 2008.
5. D. Phan, J. Gerth, M. Lee, A. Paepcke, and T. Winograd. Visual analysis of network flow data with timelines and event plots. In Proc. of Workshop on Visualization for Computer Security (VizSEC '07), pages 85-99, Sacramento, CA, Octoboer 29 2007.
6. K. Lakkaraju, W. Yurcik, and A.J. Lee. NVisionIP: netflow visualizations of system state for security situational awareness. In Proc. of the 2004 ACM workshop on Visualization and data mining for computer security (VizSEC/DMSEC), pages 65-72, New York, NY, 2004.
7. W. Yurcik. Visualizing netflows for security at line speed: The SIFT tool suite. In Proc. of 19th Large Installation System Administration Conference (LISA '05), page 16, San Diego, CA, December 4-9 2005.
8. P. Hertzog. Visualizations to improve reactivity towards security incidents inside corporate networks. In Proc. of the 3rd international workshop on Visualization for computer security (VizSec '06), pages 95-102, Alexandria, Virginia, November 3 2006.
9. D. Lalanne, E. Bertini, P. Hertzog, and P. Bados. Visual analysis of corporate network intelligence: Abstracting and reasoning on yesterdays for acting today. In Proc. of Workshop on Visualization for Computer Security (VizSec'07), pages 115-130, Sacramento, CA, October 29 2007.
10. Q. Liao, A. Blaich, A. Striegel, and D. Thain. ENAVis: Enterprise network activities visualization. In Proc. of the USENIX 22nd Large Installation System Administration Conference (LISA '08), pages 59-74, San Diego, CA, November 9-14 2008.
11. A. Schenker, M. Last, H. Bunke, and A. Kandel. Comparison of distance measures for graph-based clustering of documents. In Graph Based Representations in Pattern Recognition, Springer LNCS, volume 2726, pages 187-263, 2003.
12. H. Bunke and K. Shearer. A graph distance metric based on the maximal common subgraph. Pattern Recognition Letters, 19(3-4):255-259, March 1998.
13. H. Bunke, P.J. Dickinson, M. Kraetzl, and W.D. Wallis. A Graph-Theoretic Approach to Enterprise Network Dynamics (Progress in Computer Science and Applied Logic (PCS)), volume 24. A Birkhäuser Boston book, 2007.
14. T.F. Cox and M.A.A. Cox. Multidimensional Scaling, Second Edition. Chapman & Hall/CRC, September 2000.
15. H. Bunke, P. Dickinson, A. Humm, Ch. Irniger, and M. Kraetzl. Applied Graph Theory in Computer Vision and Pattern Recognition, volume 52, chapter Graph Sequence Visualisation and its Application to Computer Network Monitoring and Abnormal Event Detection, pages 227-245. Springer Berlin / Heidelberg, 2007.
16. P. Pons and M. Latapy. Computing communities in large networks using random walks. Journal of Graph Algorithms and Applications, 10(2):191-218, 2006.
17. S. Fortunato. Community detection in graphs. Physics Reports, 486(3-5):75-174, February 2010.
18. W.M. Rand. Objective criteria for the evaluation of clustering methods. Journal of the American Statistical Association, 66(336):846-850, Dec. 1971.
19. S. Lehmann, M. Schwartz, and L. K. Hansen. Biclique communities. Physical Review E, 78(1):016108, 2008.
20. D. Thain, T. Tannenbaum, and M. Livny. Distributed computing in practice: The condor experience. Concurrency and Computation: Practice and Experience, 17(2-4):323-356, February-April 2005.
21. R. Marty. Applied Security Visualization. Addison Wesley Professional, 2008.
22. R. McRee. Security visualization: What you don't see can hurt you. Information Systems Security Association (ISSA) Journal, June 2008.
23. D. Schweitzer and W. Brown. Using visualization to teach security. Journal of Computing Sciences in Colleges, 24(5):143-150, May 2009.
24. J. McPherson, K. Ma, P. Krystosk, T. Bartoletti, and M. Christensen. Portvis: a tool for port-based detection of security events. In Proc. of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security (VizSec/DMSEC'04), pages 73-81, Washington DC, 2004.
25. B.V.W. Irwin and J.P. Riel. Inetvis: a graphical aid for the detection and visualisation of network scans. In Proc. of Workshop on Visualisation for Computer Security (VizSec'07), Sacramento, CA, October 29 2007.
26. K. Abdullah, C. Lee, G. Conti, and J.A. Copeland. Visualizing network data for intrusion detection. In Proc. of the 2002 IEEE Workshop on Information Assurance and Security, pages 30-38, United States Military Academy, West Point, NY, June 17-19 2002.
27. F. Mansmann, L. Meier, and D. Keim. Graph-based monitoring of host behavior for network security. In Proc. of Workshop on Visualization for Computer Security (VizSec'07), pages 187-202, Sacramento, CA, October 29 2007.
28. J. Tolle and O. Niggemann. Supporting intrusion detection by graph clustering and graph drawing. In Proc. of RAID 2000 Third International Workshop on the Recent Advances in Intrusion Detection, pages 51-62, Toulouse, France, October 2-4 2000.
29. P. Ren, Y. Gao, Z. Li, Y. Chen, and B. Watson. Idgraphs: Intrusion detection and analysis using histographs. In Proc. of the IEEE Workshops on Visualization for Computer Security (VizSec'05), Minneapolis, MN, October 26 2005.
30. R.F. Erbacher, K.L. Walker, and D.A. Frincke. Intrusion and misuse detection in large-scale systems. IEEE Computer Graphics and Applications, 22(1):38-47, Jan/Feb 2002.
31. A. Stewart. Efficient visualization of change events in enterprise networks. In Proc. of IEEE Workshop on Enterprise Network Security, pages 1-6, Baltimore, MD, Aug.28-Sep.1 2006.