Pianola - Visualization of multivariate time-series security event data

Proceedings of the International Conference on Information Visualisation

Volumn , Issue , 2013, Pages 123-131

  Thomson, Alistair ^a   Graham, Martin ^b   Kennedy, Jessie ^b  

^a ECS Security Ltd   (United Kingdom)

^b EDINBURGH NAPIER UNIVERSITY   (United Kingdom)

Author keywords

Information visualization; Security visualization

Indexed keywords

COMMAND-LINE INTERFACES; DETECTION OF ATTACKS; INFORMATION VISUALIZATION; INTRUSION DETECTION SYSTEMS; NETWORK SECURITY VISUALIZATIONS; SECURITY VISUALIZATION; SMALL AND MEDIUM SIZED BUSINESS; SUBJECTIVE WORKLOAD;

DATA VISUALIZATION; INFORMATION ANALYSIS; INFORMATION SYSTEMS; NASA; TOOLS; VISUALIZATION;

NETWORK SECURITY;

EID: 84893211036     PISSN: 10939547     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IV.2013.15     Document Type: Conference Paper

References (31)

1. Symantec Corp. Internet security threat report-2011 trends, White Paper, Symantec Corp, April, 2012.
2. National Security Agency. Defense in depth: A practical strategy for achieving information assurance in today's highly networked environments. Retrieved 14 June, 2012, from http://www.nsa.gov/ia/-files/support/ defenseindepth.pdf
3. M. Roesch. Snort-lightweight intrusion detection for networks, Proc. 13th USENIX conference on System administration, USENIX Association 1999, pp.229-238.
4. G. Conti. Security data visualization: Graphical techniques for network analysis. San Francisco, California, USA: No Starch Press, 2007.
5. G. Conti, K. Abdullah, J. Grizzard, J. Stasko, J.A. Copeland, M. Ahamad, et al. Countering security analyst and network administrator overload through alert and packet visualization, IEEE Computer Graphics & Applications, vol. 26(2), March 2006, pp. 60-70, doi:10.1109/MCG.2006.30.
6. M.R. Endsley. Theoretical underpinnings of situation awareness: A critical review, in Situation awareness: Analysis and measurement, M. R. Endsley and D. J. Garland Eds. Mahwah, NJ, USA: Lawrence Erlbaum Associates Inc, 2000, pp.3-28.
7. S.K. Card, J.D. Mackinlay and B. Shneiderman. Information visualization, in Readings in information visualization: Using vision to think, S. K. Card, J. D. Mackinlay and B. Shneiderman Eds. San Francisco: Morgan Kaufmann, 1999, pp.1-34.
8. W. Muller and H. Schumann. Visualization methods for timedependent data-an overview, Proc. 35th Winter Simulation Conference: Driving Innovation, ACM Press, 7-10 December 2003, pp.737-745, doi:10.1109/WSC.2003.1261490.
9. A. Komlodi, J.R. Goodall and W.G. Lutters. An information visualization framework for intrusion detection, Proc. ACM Conference on Human Factors in Computing Systems-extended abstracts, ACM Press, 24-29 April 2004, pp.1743-1746, doi:10.1145/985921.1062935.
10. R.S. Thompson, E.M. Rantanen and W. Yurcik. Network intrusion detection cognitive task analysis: Textual and visual tool usage and recommendations, Proc. Human Factors and Ergonomics Society 50th Annual Meeting, SAGE Publications, 16-20 October 2006, pp.669-673, doi:10.1177/154193120605000511.
11. Y. Livnat, J. Agutter, S. Moon, R.F. Erbacher and S. Foresti. A visualization paradigm for network intrusion detection, Proc. 6th IEEE Information Assurance Workshop, 15-17 June 2005, pp.92-99, doi:10.1109/IAW.2005. 1495939.
12. W. Aigner, S. Miksch, H. Schumann and C. Tominski. Visualization of time-oriented data. London: Springer-Verlag, 2011.
13. N.W. Kim, S.K. Card and J. Heer. Tracing genealogical data with timenets, Proc. Advanced Visual Interfaces, ACM Press, 26-28 May 2010, pp.241-248, doi:10.1145/1842993.1843035.
14. D. Luo, J. Yang, M. Krstajic, W. Ribarsky and D. Keim. Eventriver: An event-based visual analytics approach to exploring large text collections with a temporal focus, IEEE Transactions on Visualization and Computer Graphics, vol. 18(1) 2012, pp. 93-105, doi:10.1109/TVCG.2010.225.
15. H. Shiravi, A. Shiravi and A. Ghorbani. A survey of visualization systems for network security, IEEE Transactions on Visualization and Computer Graphics, vol. 18(8) 2012, pp. 1313-1329, doi:10.1109/TVCG.2011.144.
16. H. Koike and K. Ohno. Snortview: Visualization system of snort logs, Proc. 2004 ACM workshop on Visualization and data mining for computer security, ACM Press, 25-29 October 2004, pp.143-147, doi:10.1145/1029208.1029232.
17. K. Abdullah, C. Lee, G. Conti, J.A. Copeland and J. Stasko. Ids rainstorm: Visualizing ids alarms, Proc. IEEE Workshop on Visualization for Computer Security, IEEE Computer Society, 26 October 2005, doi:10.1109/vizsec. 2005.8.
18. D. Keim. Designing pixel-oriented visualization techniques: Theory and applications, IEEE Transactions on Visualization and Computer Graphics, vol. 6(1), January-March 2000, pp. 59-78, doi:10.1109/2945.841121.
19. Y. Livnat, J. Agutter, M. Shaun and S. Foresti. Visual correlation for situational awareness, Proc. IEEE Symposium on Information Visualization, IEEE Computer Society Press, 23-25 October 2005, pp.95-102, doi:10.1109/infvis.2005. 1532134.
20. E. Bertini, P. Hertzog and D. Lalanne. Spiralview: Towards security policies assessment through visual correlation of network resources with evolution of alarms, Proc. IEEE Symposium on Visual Analytics Science and Technology, IEEE Computer Society Press, 30 October-1 November 2007, pp.139-146, doi:10.1109/VAST.2007.4389007.
21. J.R. Goodall, W.G. Lutters and A. Komlodi. The work of intrusion detection: Rethinking the role of security analysts, Proc. Americas Conference on Information Systems, AIS Press, 6-8 August 2004, pp.1421-1427.
22. J.R. Goodall. An evaluation of visual and textual network analysis tools, Information Visualization, vol. 10(2) 2011, pp. 145-157, doi:10.1057/ivs.2011. 2.
23. M.R. Endsley, B. Bolté and D.G. Jones. Designing for situtation awareness : An approach to user-centered design. London ; New York: Taylor & Francis, 2003.
24. B. Shneiderman. The eyes have it: A task by data type taxonomy for information visualizations, Proc. IEEE Visual Languages Symposium, IEEE Computer Society Press, 3-6 September 1996, pp.336-343, doi:10.1109/VL.1996.545307.
25. A.U. Frank. Different types of 'times' in gis, in Spatial and temporal reasoning in geographic information systems, M. J. Egenhofer and R. G. Golledge Eds. New York, NY, USA: Oxford University Press, 1998, pp.40-62.
26. C. Reas and B. Fry. Processing : A programming handbook for visual designers and artists, 1st ed. Cambridge: MIT Press, 2007.
27. M.C. Chuah, S.F. Roth, J. Mattis and J. Kolojejchick. Sdm: Selective dynamic manipulation of visualizations, Proc. 8th Annual ACM Symposium on User Interface and Software Technology, ACM Press, 14-17 November 1995, pp.61-70, doi:10.1145/215585.215654.
28. D. Holten. Hierarchical edge bundles: Visualization of adjacency relations in hierarchical data, IEEE Transactions on Visualization and Computer Graphics, vol. 12(5), Sept/Oct 2006, pp. 741-748, doi:10.1109/TVCG.2006.147.
29. S.G. Hart and L.E. Staveland. Development of nasa-tlx (task load index): Results of empirical and theoretical research, in Human mental workload, A. Hancock and N. Meshati Eds. Amsterdam, Holland: North Holland Press, 1988, pp.139-184.
30. S.G. Hart. Nasa-task load index (nasa-tlx); 20 years later, Proc. Human Factors and Ergonomics Society 50th Annual Meeting, SAGE Publications, 16-20 October 2006, pp.904-908, doi:10.1177/154193120605000909.
31. M. Krstajié, E. Bertini and D. Keim. Cloudlines: Compact display of event episodes in multiple time-series, IEEE Transactions on Visualization and Computer Graphics, vol. 17(12), Nov Dec 2011, pp. 2432-2439, doi: 10.1109 TVCG.201 1.179.