NetViewer: A Visualization Tool for Network Security Events

Zhang, Jiawan; Peng, Yang; Lu, Lidan; Chen, Lei

doi:10.1109/nswctc.2009.353

Cited by 8 publications

(1 citation statement)

References 5 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Utilization of Visual Cues in Network Security Tools Monocular Cues 3D Visualization Tool Perspective [16], [22], [23], [24], [25], [26] Size [16], [22], [25] Texture [16], [20] Occlusion [27], [16], [22], [23], [20], [24], [28], [25], [26] Shadows [16], [22], [20] Motion Parallax None Binocular Cues 3D Visualization Tool Binocular Disparity [27] Table 1 shows a collection of network security tools and their associated visual cues. Below is a explanation of both monocular cues and binocular.…”

Section: Table I: Visual Cues In Network Securitymentioning

confidence: 99%

3DSVAT: A 3D Stereoscopic Vulnerability Assessment Tool for network security

Nunnally

Uluagac

Copeland

et al. 2012

37th Annual IEEE Conference on Local Computer Networks

View full text Add to dashboard Cite

As the volume of network data continues to increase and networks become more complex, the ability to accurately manage and analyze data quickly becomes a difficult problem. Many network management tools already use two-dimensional (2D) and three-dimensional (3D) visualization techniques to help support decision-making and reasoning of network anomalies and activity. However, a poor user interface combined with the massive amount of data could obfuscate important network details. As a result, administrators may fail to detect and identify malicious network behavior in a timely manner. 3D visualizations address this challenge by introducing monocular and binocular visual cues to portray depth and to increase the perceived viewing area. In this work, we explore these cues for 3D network security applications, with a particular emphasis on binocular disparity or stereoscopic 3D. Currently, no network security tool takes advantage of the enhanced depth perception provided by stereoscopic 3D technologies for vulnerability assessment. Compared to traditional 3D systems, stereoscopic 3D helps improve the perception of depth, which can, in turn reduce the number of errors and increase response times of network administrators. Thus, we introduce a stereoscopic 3D visual Framework for Rendering Enhanced 3D Stereoscopic Visualizations for Network Security (FRE3DS). Our novel framework uses state-of-the art 3D graphics rendering to assist in 3D visualizations for network security applications. Moreover, utilizing our framework, we propose a new 3D Stereoscopic Vulnerability Assessment Tool (3DSVAT). We illustrate the use of 3DSVAT to assist in rapid detection and correlation of attack vulnerabilities in a subset of a modified local area network data set using the enhanced perception of depth in a stereoscopic 3D environment.

show abstract

Section: Table I: Visual Cues In Network Securitymentioning

confidence: 99%

3DSVAT: A 3D Stereoscopic Vulnerability Assessment Tool for network security

Nunnally

Uluagac

Copeland

et al. 2012

37th Annual IEEE Conference on Local Computer Networks

View full text Add to dashboard Cite

show abstract

A Survey on Information Visualization for Network and Service Management

Guimaraes

Freitas

Sadre

et al. 2016

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

Network and service management encompasses a set of activities, methods, procedures, and tools whose ultimate goal is to guarantee the proper functioning of a networked system. Computational tools are essential to help network administrators in their daily tasks, and information visualization techniques are of great value in such context. In essence, information visualization techniques associated to visual analytics aim at facilitating the tasks of network administrators in the process of monitoring and maintaining the network health. This paper surveys the use of information visualization techniques as a tool to support the network and service management process. Through a Systematic Literature Review (SLR), we provide a historical overview and discuss the current state of the art in the field. We present a classification of 285 articles and papers from 1985 to 2013, according to an information visualization taxonomy as well as a network and service management taxonomy. Finally, we point out future research directions and opportunities regarding the use of information visualization in network and service management.Taking into account the example mentioned above, [15] and [17] are examples of articles/papers that match with the research goal. Thus, they are stored and cataloged, and their references are verified. In the analysis of the references of [15], for example, we found the work of Koike et al. "Visualizing cyber attacks using IP matrix" [19]. On the other hand, [16] is an example of a work that was discarded after the analysis of the abstract and keywords (i.e., the second step of filtering).Once finished the search process, a set of 374 articles and papers remained selected. These publications are from a time interval ranging from 1985 to 2013.

show abstract

Visual Clustering of Spam Emails for DDoS Analysis

Huang

Zhang

Nguyễn³

et al. 2011

2011 15th International Conference on Information Visualisation

View full text Add to dashboard Cite

Abstract-Networking attacks embedded in spam emails are increasingly becoming numerous and sophisticated in nature. Hence this has given a growing need for spam email analysis to identify these attacks. The use of these intrusion detection systems has given rise to other two issues, 1) the presentation and understanding of large amounts of spam emails, 2) the user-assisted input and quantified adjustment during the analysis process. In this paper we introduce a new analytical model that uses two coefficient vectors: 'density' and 'weight' for the analysis of spam email viruses and attacks. We then use a visual clustering method to classify and display the spam emails. The visualization allows users to interactively select and scale down the scope of views for better understanding of different types of the spam email attacks. The experiment shows that this new model with the clustering visualization can be effectively used for network security analysis.

show abstract

NetViewer: A Visualization Tool for Network Security Events

Cited by 8 publications

References 5 publications

3DSVAT: A 3D Stereoscopic Vulnerability Assessment Tool for network security

3DSVAT: A 3D Stereoscopic Vulnerability Assessment Tool for network security

A Survey on Information Visualization for Network and Service Management

Visual Clustering of Spam Emails for DDoS Analysis

Contact Info

Product

Resources

About