Visual analysis of network flow data with timelines and event plots

VizSEC 2007 - Proceedings of the Workshop on Visualization for Computer Security

Volumn , Issue , 2008, Pages 85-99

  Phan, D ^a   Gerth, J ^a   Lee, M ^a   Paepcke, A ^a   Winograd, T ^a  

^a Stanford University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AFFORDANCES; FLEXIBLE TOOL; NETWORK FLOWS; TEMPORAL RELATIONSHIPS; TRAFFIC STRUCTURES; VISUAL ANALYSIS; VISUAL CLASSIFICATION; VISUAL REPRESENTATIONS;

SECURITY SYSTEMS; VISUALIZATION;

SECURITY OF DATA;

EID: 84890932071     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. Abdullah, K., C. P. Lee, et al. (2005). "IDS RainStorm: visualizing IDS alarms." IEEE Workshop on Visualization for Computer Security, 2005. (VizSEC 05): 1-10.
2. Bertin, J. (1983). Semiology of Graphics: Diagrams, Networks, Maps, University of Wisconsin Press. Visual Analysis of Network Flow Data with Timelines and Event Plots 99
3. D'Amico, A., K. Whitley, et al. (2005). Achieving Cyber Defense Situational Awareness: A Cognitive Task Analysis of Information Assurance Analysts. Human Factors and Ergonomics Soc. 49th Ann. Meeting.
4. D'Amico, A., J. R. Goodall, et al. (2007). "Visual discovery in computer network defense." IEEE Computer Graphics and Applications.
5. Goodall, J. R., W. G. Lutters, et al. (2005). "Preserving the big picture: visual network traffic analysis with TNV." IEEE Workshop on Visualization for Computer Security, 2005.
6. (VizSEC 05). http ://www.qosient.com/argus Argus.
7. Kannan, J., J. Jung, et al. (2006). "Semi-automated discovery of application session structure." Proceedings of the Sixth ACM SIGCOMM on Internet Measurement.
8. Karagiannis, T., K. Papagiannaki, et al. (2005). "BLINC: multilevel traffic classification in the dark." ACM SIGCOMM Computer Communication Review 35(4): 229-240.
9. Keim, D. A., F. Mansmann, et al. (2006). "Monitoring Network Traffic with Radial Traffic Analyzer." IEEE Symposium on Visual Analytics Science and Technology.
10. Lakkaraju, K., W. Yurcik, et al. (2004). "NVisionIP: netflow visualizations of system state for security situational awareness." Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security: 65-72.
11. Lee, J. J., K. R. Hess, et al. (2000). "Extensions and applications of event charts." The American Statistician 54(1).
12. Livnat, Y., J. Agutter, et al. (2005). "A visualization paradigm for network intrusion detection." IEEE Workshop on Information Assurance and Security.
13. McPherson, J., K. L.Ma, et al. (2004). "PortVis: a tool for port-based detection of security events." Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security: 73-81.
14. Musa, S. and D. J. Parish (2007). "Visualising communication network security attacks." Information Visualization, 2007. IV'07. 11th International Conference: 726-733.
15. Phan, D., L. Xiao, et al. (2005). "Flow map layout." IEEE Symposium on Information Visualization (INFOVIS): 219-224.
16. Phan, D., A. Paepcke, et al. (2006). "Progressive multiples for communication-minded visualization." Graphics Interface.
17. Rao, R. and S. K. Card (1994). "The table lens: merging graphical and symbolic representations in an interactive focus+ context visualization for tabular information." Proceedings of the SIGCHI Conference on Human Factors in Computing Systems.
18. Shneiderman, B. (1996). "The eyes have it: a task by data type taxonomy for information visualizations." IEEE Symposium on Visual Languages: 336-343.
19. Tufte, E. R. (1990). Envisioning Information, Graphics Press.
20. Tversky, B., J. B. Morrison, et al. (2002). "Animation: can it facilitate." International Journal of Human-Computer Studies 57(4): 247-262.
21. Xiao, L., J. Gerth, et al. (2006). "Enhancing visual analysis of network traffic using a knowledge representation." IEEE Symposium on Visual Analytics Science and Technology: 107-114.
22. Yin, X.,W. Yurcik, et al. (2004). "VisFlowConnect: netflow visualizations of link relationships for security situational awareness." Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security: 26-34.