Putting security in context: Visual correlation of network activity with real-world information

VizSEC 2007 - Proceedings of the Workshop on Visualization for Computer Security

Volumn , Issue , 2008, Pages 203-220

  Pike, W A ^a   Scherrer, C ^a   Zabriskie, S ^a  

^a PACIFIC NORTHWEST NATIONAL LABORATORY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONTEXTUALIZATION; GEOPOLITICAL EVENTS; NETWORK ACTIVITIES; REAL-WORLD INFORMATION; SITUATIONAL AWARENESS; TEXTUAL INFORMATION; VISUAL CORRELATIONS; VISUALIZATION TOOLS;

SECURITY OF DATA; VISUALIZATION;

SECURITY SYSTEMS;

EID: 84890913169     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. Barsalou L, Yeh W, et al. (1993) Concepts and meaning. Chicago Linguistics Society: Papers from the Parasession on Conceptual Representations.
2. K Beals, G Cooke, D Kathman, et al. Chicago, University of Chicago 29:23-61.
3. Conti G, Abdullah K, et al. (2006) Countering security information overload through alert and packet visualization. IEEE Computer Graphics and Applications (March/April):30-40.
4. Cordella LP, Finizio I, et al. (2005) Using behavior knowledge space and temporal information for detecting intrusions in computer networks. Pattern Recognition and Image Analysis, Pt 2, Proceedings 3687:94-102.
5. D'Amico A and Larkin M (2001) Methods of visualizing temporal patterns in and mission impact of computer security breaches. DARPA Information Survivability Conference and Exposition II, IEEE Computer Society.
6. Erbacher R, Walker K, et al. (2002) Intrusion and misuse detection in large-scale systems. Computer Graphics and Applications 22(1):38-48.
7. Foresti S, Agutter J, et al. (2006) Visual correlation of network alerts. IEEE Computer Graphics and Applications 26(2):48-59.
8. Goodall J, Lutters W, et al. (2004) I know my network: Collaboration and expertise in intrusion detection. Proceedings of the ACM Conference on Computer-Supported Cooperative Work, CHI Letters, ACM Press, New York, pp. 342-345.
9. Hertzog P (2006) Visualizations to improve reactivity towards security incidents inside coroporate networks. ACM Conference on Computer and Communications Security, Third International Workshop on Visualization for Computer Security, Alexandria, VA, ACM Press, New York, pp. 95-102.
10. Hetzler B, Harris W, et al. (1998) Visualizing the full spectrum of document relationships. International Structures and Relations in Knowledge Organization, Proceedings of the Fifth International ISKO Conference, Wurzburg, ERGON Verlag, pp. 168-175.
11. Kafadar K and Wegman EJ (2006) Visualizing "typical" and "exotic" Internet traffic data. Computational Statistics & Data Analysis 50:3721-3743.
12. Ko C, Frincke DA, et al. (1993) Analysis of an algorithm for distributed recognition and accountability. Proceedings of the First ACM Conference on Computer and Communications Security. Fairfax, Virginia, United States, ACM Press, New York.
13. Krasser S, Conti G, et al. (2005) Real-time and forensic network data analysis using animated and coordinated visualization. IEEE Workshop of Information Assurance and Security, West Point, NY.
14. Lakkaraju K, Yurcik W, et al. (2004) NVisionIP: Netflow visualizations of system state for security situational awareness. ACM Conference on Computer and Communications Security, Workshop on Visualization and Data Mining for Computer Security, Washington, DC, ACM Press, New York, pp. 65-72.
15. Leckie T and Yasinsac A (2004) Metadata for anomaly-based security protocol attack deduction. IEEE Transactions on Knowledge and Data Engineering 16(9):1157-1168.
16. Paulson L (2004) Researchers develop network-security visualization tools. Computer 37(4): 17-18.
17. Porras P, Fong M, et al. (2002) A mission-impact-based approach to INFOSEC alarm correlation. Fifth International Symposium on Recent Advances in Intrusion Detection (RAID 2002), Zurich, Switzerland, Springer, Berlin Heidelberg New York, pp. 95-114.
18. Randazzo M, Keeney M, et al. (2004) Insider threat study: Illicit cyber activity in the banking and finance sector, U.S. Secret Service and CERT Coordination Center.
19. Stolfo S, Hershkop S, et al. (2003) Behavior profiling of email. First NSF/NIJ Symposium on Intelligence and Security Informatics, Tucson, AZ, Springer, Berlin Heidelberg New York, pp. 74-90.
20. Thompson R, Rantanen E, et al. (2006) Network intrusion detection cognitive task analysis: Textual and visual tool usage and recommendations. Proceedings of the Human Factors and Ergonomics Society (HFES 06), pp. 669-673.
21. Wegman EJ and Marchette D (2003) On some techniques for streaming data: A case study of