We present the results of a controlled experiment to investigate the performance of different temporal glyph designs in a small multiple setting. Analyzing many time series at once is a common yet difficult task in many domains, for example in network monitoring. Several visualization techniques have, thus, been proposed in the literature. Among these, iconic displays or glyphs are an appropriate choice because of their expressiveness and effective use of screen space. Through a controlled experiment, we compare the performance of four glyphs that use different combinations of visual variables to encode two properties of temporal data: a) the position of a data point in time and b) the quantitative value of this data point. Our results show that depending on tasks and data density, the chosen glyphs performed differently. Line Glyphs are generally a good choice for peak and trend detection tasks but radial encodings are more effective for reading values at specific temporal locations. From our qualitative analysis we also contribute implications for designing temporal glyphs for small multiple settings.

1. Human activities modify the disturbance regimes of tropical forests. Since tropical forests host high biological diversity, understanding the role of biodiversity in ecosystem recovery pathways and the underlying ecological mechanisms is crucial to predict the fate of tropical ecosystems. Studies relying on regularly censused forest plots, rarely include disturbed forests, are not long enough to assess longterm forest dynamics and often lack repeatability.2. We used an individual-based model of tropical forest growth to assess the effect of species and functional diversity on long-term ecosystem recovery from disturbance. We manipulated the number of species and functional assemblages across a large number of simulations and simulated different levels of disturbance. To investigate the ecological mechanisms that underlie the effect of biodiversity on forest functioning along recovery pathways, we partitioned the net effect of biodiversity on ecosystem properties into complementarity and selection effects over time.3. We found that functional diversity improved tropical forest resilience after a disturbance. The complementarity effect dominated soon after the disturbance but was progressively surpassed by a selection effect as more competitive species dominated the forest community. This pattern increased with the intensity of the disturbance. Synthesis.We found that the mechanisms through which biodiversity influences forest functioning depend on the ecosystem state, shifting from a dominant complementarity effect in recently disturbed systems to a selection effect in systems disturbed a long time ago. Our results thus suggest that the time since the last disturbance is a key to understanding biodiversity-ecosystem functioning relationships in tropical forests and can help reconcile previous contrasting results obtained with snapshots of ecosystem state in empirical studies. 832 | biodiversity-ecosystem functioning, complementarity effect, disturbance, individual-based model, recovery, selection effect, simulation | 833 Journal of Ecology SCHMITT eT al.

The importance of the Internet and our dependency on computer networks are steadily growing, which results in high costs and substantial consequences in case of successful intrusions, stolen data, and interrupted services. At the same time, a trend towards massive attacks against the network infrastructure is noticeable. Therefore, monitoring large networks has become an important field in practice and research. Through monitoring systems, attacks can be detected and analyzed to gain knowledge of how to better protect the network in the future. In the scope of this paper, we present a system to analyze NetFlow data using a relational database system. NetFlow records are linked with alerts from an intrusion detection system to enable efficient exploration of suspicious activity within the monitored network. Within the system, the monitored network is mapped to a TreeMap visualization, the attackers are arranged at the borders and linked using splines parameterized with prefix information. In a series of case studies, we demonstrate how the tool can be used to judge the relevance of alerts, to reveal massive distributed attacks, and to analyze service usage within a network.