Visualization of host behavior for network security

VizSEC 2007 - Proceedings of the Workshop on Visualization for Computer Security

Volumn , Issue , 2008, Pages 187-202

  Mansman, F ^a   Meier, L ^a   Keim, D A ^a  

^a UNIVERSITY OF KONSTANZ   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

GRAPH LAYOUT ALGORITHMS; HYPOTHESIS GENERATION; NETWORK INFRASTRUCTURE; NETWORK MONITORING; NETWORK TRAFFIC; TWO DIMENSIONAL SPACES; VISUAL ANALYTICS; VISUAL EXPLORATION;

NETWORK SECURITY; SECURITY SYSTEMS; TOOLS;

VISUALIZATION;

EID: 84862621856     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (28)

1. Abdullah, K., Lee, C., Conti, G., Copeland, J.A., Stasko, J.: Ids rainstorm: Visualizing ids alerts. In: Proceedings of the IEEE Workshop on Visualization for Computer Security (VizSEC). Minneapolis, USA (2005)
2. Chen, C.: Information Visualization-Beyond the Horizon. 2nd edn. Springer, Berlin Heidelberg New York (2004)
3. Cheswick, B., Burch, H., Branigan, S.: Mapping and visualizing the internet. In: Proceedings of 2000 USENIX Annual Technical Conference (2000)
4. Claffy, K.: Caida: Visualizing the Internet. IEEE Internet Comput. 5(1), 88 (2001)
5. Davidson, R., Harel, D.: Drawing graphs nicely using simulated annealing. ACM Trans. Graph. 15(4), 301-331 (1996). DOI http ://doi.acm.org/10.1145/ 234535.234
6. Eades, P.A.: A heuristic for graph drawing. In: Congressus Numerantium, vol. 42, pp. 149-160 (1984)
7. Eick, S.G.: The Visualization Handbook, chap. Scalable Network Visualization, pp. 819-829. Elsevier, Amsterdam (2005)
8. Fink, G.A., Muessig, P., North, C.: Visual correlation of host processes and network traffic. In: Proceedings of IEEE Workshop on Visualization for Computer Security (VizSEC), pp. 11-19 (2005)
9. Fruchterman, T.M.J., Reingold, E.M.: Graph drawing by force-directed placement. Software-Practice and Experience 21(11), 1129-1164 (1991). URL citeseer.ist.psu.edu/ fruchterman91graph.html
10. Goodall, J.R., Lutters, W.G., Rheingans, P., Komlodi, A.: Focusing on context in network traffic analysis. IEEE Comput. Graphics Appl. 26(2), 72-80 (2006). DOI http ://doi.ieeecomputersociety.org/10.1109/MCG.2006.31
11. Kamada, T., Kawai, S.: An algorithm for drawing general undirected graphs. Inf. Process. Lett. 31(1), 7-15 (1989). DOI http ://dx.doi.org/10.1016/ 0020-0190(89)90102-6
12. Keim, D., Ward, M.: Visual Data Mining Techniques, pp. 403-427. 2nd edn. Springer, Berlin Heidelberg New York (2002)
13. Lakkaraju, K., Bearavolu, R., Slagell, A., Yurcik, W., North, S.: Closing-the-loop in nvisionip: Integrating discovery and search in security visualizations. In: Proceedings of IEEE Workshop on Visualization for Computer Security (VizSEC) (2005)
14. Lau, S.: The spinning cube of potential doom. Commun. ACM 47(6), (2004)
15. Lee, C.P., Trost, J., Gibbs, N., Beyah, R., Copeland, J.A.: Visual firewall: Real-time network security monito. In: Proceedings of IEEE Workshop on Visualization for Computer Security (VizSEC), pp. 129-136 (2005)
16. Livnat, Y., Agutter, J., Moon, S., Erbacher, R., Foresti, S.: A visualization paradigm for network intrusion detection. In: IEEE Information Asssurance Workshop, pp. 92-99 (2005)
17. Mansmann, F., Keim, D.A., North, S.C., Rexroad, B., Shelehedal, D.: Visual analysis of network traffic for resource planning, interactive monitoring, and interpretation of security threats. IEEE Transactions on Visualization and Computer Graphics 13(6), (2007)
18. Marchette, D.J.: Computer intrusion detection and network monitoring-a statistical viewpoint. Statistics for Engineering and Information Science. Springer, Berlin Heidelberg New York (2001)
19. McPherson, J., Ma, K.L., Krystosk, P., Bartoletti, T., Christensen, M.: Portvis: a tool for portbased detection of security events. In: Proceedings of ACM Workshop on Visualization and Data Mining for Computer Security, pp. 73-81. ACM Press, New York, NY (2004)
20. Muelder, C., Ma, K.L., Bartoletti, T.: A visualization methodology for characterization of network scans. In: Proceedings of IEEE Workshop on Visualization for Computer Security (VizSEC). Minneapolis, USA (2005)
21. Munzner, T., Hoffman, E., Claffy, K., Fenner, B.: Visualizing the global topology of the mbone. In: IEEE InfoVis. IEEE Computer Society, Los Alamitos, CA, USA (1996)
22. O'Madadhain, J., Fisher, D., Smyth, P., White, S., Boey, Y.B.: Analysis and visualization of network data using jung. J. Statist. Software (2007). URL http ://www.jstatsoft.org/
23. PostgreSQL Global Development Group: PostgreSQL (2007). http ://www.postgresql.org/ cited 10/09/2007
24. Sourcefire: Real-time network awareness (2005). URL http ://www.sourcefire.com/products/rna. html. Cited on 11/11/2007
25. Thomas, J.: Visual analytics: a grand challenge in science-turning information overload into the opportunity of the decade. In: Proceedings IEEE Symposium on Information Visualization (InfoVis), p. xii. IEEE Computer Society (2005). Keynote address
26. Thomas, J., Cook, K.: Illuminating the Path: Research and Development Agenda for Visual Analytics. IEEE Press, New York (2005)
27. Xiao, L., Gerth, J., Hanrahan, P.: Enhancing visual analysis of network traffic using a knowledge representation. In: Visual Analytics Science and Technology (VAST), pp. 107-114 (2006)
28. Yin, X., Yurcik, W., Treaster, M., Li, Y., Lakkaraju, K.: Visflowconnect: netflow visualizations of link relationships for security situational awareness. In: VizSEC/DMSEC, pp. 26-34 (2004)