A user-centered approach to visualizing network traffic for intrusion detection

Conference on Human Factors in Computing Systems - Proceedings

Volumn , Issue , 2005, Pages 1403-1406

  Goodall, John R ^a   Ozok, A Ant ^a   Lutters, Wayne G ^a   Rheingans, Penny ^b   Komlodi, Anita ^a  

^a UNIVERSITY OF MARYLAND BALTIMORE COUNTY   (United States)

^b University of Marylandw Baltimore County   (United States)

Author keywords

Information visualization; Intrusion detection; Network security; Usability testing; User centered design

Indexed keywords

COMPLEX TASK; EMPIRICAL EVALUATIONS; HIGH SPEED COMPUTER NETWORKS; INFORMATION VISUALIZATION; NETWORK ACTIVITIES; NETWORK DATA; NETWORK LINKS; NETWORK STATE; NETWORK TRAFFIC; USABILITY TESTING; USER CENTERED DESIGNS; USER STUDY; USER-CENTERED; USER-CENTERED APPROACH;

HUMAN ENGINEERING; INFORMATION ANALYSIS; INFORMATION SYSTEMS; NETWORK SECURITY;

INTRUSION DETECTION;

EID: 84869129317     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1056808.1056927     Document Type: Conference Paper

References (8)

1. .Becker, R.A., Eick, S.G., and Wilks, A.R. Visualizing network data. IEEE Transactions on Visualization and Computer Graphics 1, 1 (1995), 16-28.
2. Erbacher, R., Walker, K., & Frincke, D. Intrusion and misuse detection in large-scale systems. IEEE Computer Graphics & Applications 1 (2002), 38-48.
3. .Goodall, J.R., Lutters, W.G., and Komlodi, A. I Know My Network: Expertise in Intrusion Detection. Proc. ACM CSCW, (2004), 342-345.
4. Komlodi, A., Goodall, J.R., and Lutters, W.G. An information visualization framework for intrusion detection. ACM CHI Extended Abstracts, (2004).
5. .McPherson, J., Ma, K., Krystosk, P., Bartoletti, T., and Christensen, M. PortVis: A tool for port-based detection of security events. ACM Workshop on Visualization and Data Mining for Computer Security, (2004), 73-81.
6. .Stolze, M., Pawlitzek, R., and Wespi, A. Visual Problem-Solving Support for New Event Triage in Centralized Network Security Monitoring. Proc.GISIDAR Conference IT Incident Management & IT Forensics, (2003).
7. Yin, X., Yurcik, W., Treaster, M., Li, Y., and Lakkaraju, K. VisFlowConnect: NetFlow visualizations of link relationships for security situational awareness. ACM Workshop on Visualization and Data Mining for Computer Security, (2004), 26-34.
8. .Yurcik, W., Barlow, J., Lakkaraju, K., & Haberman, M. Two visual computer network security monitoring tools incorporating operator interface requirements. ACM CHI Workshop on HCI and Security Systems, (2003).