Interactive analysis of netflows for misuse detection in large IP networks

Lecture Notes in Informatics (LNI), Proceedings - Series of the Gesellschaft fur Informatik (GI)

Volumn P-149, Issue , 2009, Pages 115-124

  Mansmann, Florian ^a   Fischer, Fabian ^a   Keim, Daniel A ^a   Pietzko, Stephan ^a   Waldvogel, Marcel ^a  

^a NONE

Author keywords

[No Author keywords available]

Indexed keywords

DATABASE SYSTEMS; INTERNET TELEPHONY; INTERNET PROTOCOLS; INTRUSION DETECTION; NETWORK SECURITY;

HIGHER NETWORKS; INTERACTIVE ANALYSIS; INTRUSION DETECTION METHOD; MISUSE DETECTION; NETWORK INFRASTRUCTURE; NOVEL PATTERNS; SCALABLE APPROACH; VISUAL ANALYSIS; BOTNETS; FILE SHARING; IP-NETWORK; NETFLOWS; NETWORK BANDWIDTH;

DISTRIBUTED COMPUTER SYSTEMS; BANDWIDTH;

EID: 84874674099     PISSN: 16175468     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (19)

1. [BFN04] R. Ball, G.A. Fink, and C. North. Home-centric visualization of network traffic for security administration. Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 55-64, 2004.
2. [CBB00] Bill Cheswick, H. Burch, and S. Branigan. Mapping and Visualizing the Internet. In Proceedings of the USENIX Annual Techincal Conference, 2000.
3. [Cla01] K.C. Claffy. CAIDA: Visualizing the Internet. IEEE Internet Computing, 05(1), 2001.
4. [Con07] Greg Conti. Security Data Visualization - Graphical Techniques for Network Analysis. No Starch Press, 2007.
5. [EGK+02] J. Ellson, E. Gansner, L. Koutsofios, S.C. North, and G. Woodhull. Graphviz-Open Source Graph Drawing Tools. LECTURE NOTES IN COMPUTER SCIENCE, pages 483-484, 2002.
6. [GLRK05] John R. Goodall, Wayne G. Lutters, Penny Rheingans, and Anita Komlodi. Preserving the Big Picture: Visual Network Traffic Analysis with TNV. In VIZSEC '05: Proceedings of the IEEE Workshops on Visualization for Computer Security, Washington, DC, USA, 2005. IEEE Computer Society.
7. [HCL05] J. Heer, S.K. Card, and J.A. Landay. prefuse: A toolkit for interactive information visualization. In Proceedings of the SIGCHI conference on Human factors in computing systems, pages 421-430. ACM New York, NY, USA, 2005.
8. [Hol06] Danny Holten. Hierarchical Edge Bundles: Visualization of Adjacency Relations in Hierarchical Data. IEEE Trans. Vis. Comput. Graph., 12(5):741-748, 2006.
9. [KR90] L. Kaufman and P.J. Rousseeuw. Finding groups in data. An introduction to cluster analysis. Wiley Series in Probability and Mathematical Statistics. Applied Probability and Statistics, New York: Wiley, 1990.
10. [LBS+05] K. Lakkaraju, R. Bearavolu, A. Slagell, W. Yurcik, and S. North. Closing-the-Loop in NVisionIP: Integrating Discovery and Search in Security Visualizations. In Visualization for Computer Security, IEEE Workshops on, pages 9, 26 Oct. 2005.
11. [Mar01] David J. Marchette. Computer Intrusion Detection and Network Monitoring: A Statistical Viewpoint. Springer-Verlag New York, Inc., Secaucus, NJ, USA, 2001.
12. [Mar08] Raffael Marty. Applied Security Visualization. Addison-Wesley Professional, 2008.
13. [MFKN07] F. Mansmann, F. Fischer, D. Keim, and S. North. Visualizing large-scale IP traffic flows. In Proceedings of 12th International Workshop Vision, Modeling, and Visualization, 2007.
14. [MKN+07] Florian Mansmann, Daniel A. Keim, Stephen C. North, Brian Rexroad, and Daniel Sheleheda. Visual Analysis of Network Traffic for Resource Planning, Interactive Monitoring, and Interpretation of Security Threats. IEEE Transactions on Visualization and Computer Graphics, 13(6):1105-1112, 2007.
15. [NfS07] NfSen - Netflow Sensor. A graphical web based front end for the nfdump netflow tools, 2007. http://nfsen.sourceforge.net/.
16. [Osl06] A. Oslebo. Stager AWeb Based Application for Presenting Network Statistics. In Network Operations and Management Symposium, 2006. NOMS 2006. 10th IEEE/IFIP, pages 1-15, 2006.
17. [RFL00] Steve Romig, Mark Fullmer, and Ron Luman. The OSU Flow-tools Package and CISCO Net Flow Logs. In LISA '00: Proceedings of the 14th USENIX conference on System administration, pages 291-304, Berkeley, CA, USA, 2000. USENIX Association. http://www.splintered.net/sw/flow-tools/.
18. [Shn92] Ben Shneiderman. Tree visualization with tree-maps: 2-d space-filling approach. ACM Trans. Graph., 11(1):92-99, 1992.
19. [TN+00] J. Toelle, O. Niggemann, et al. Supporting intrusion detection by graph clustering and graph drawing. In Proceedings of Third International Workshop on Recent Advances in Intrusion Detection RAID, 2000.