Using geographic information systems for enhanced network security visualization

Shelly, David; Dunlop, Matthew; Marchany, Randy; Sforza, Peter

doi:10.1145/1823854.1823872

Cited by 3 publications

(1 citation statement)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This is a common occurrence for security analysts who are bombarded with an enormous number of alerts every day. When individuals are faced with too much information they have to pick and choose which data to analyze, which often leads to important data getting overlooked [8].…”

Section: Introductionmentioning

confidence: 99%

Cover-VT: Converged Security Visualization Tool

Urbanski

Dunlop

Marchany

et al. 2011

12th IFIP/IEEE International Symposium on Integrated Network Management (IM 2011) and Workshops

Self Cite

View full text Add to dashboard Cite

The amount of data that floods toda y 's networks is well be y ond what securit y anal y sts can manage b y textual means alone. In an effort to solve this problem, researchers have explored different methods of visualizing network securit y threats. There is little debate that humans can perceive more information visuall y than textuall y . The problem is that the majorit y of visualization tools in practice or proposed do not take efficient visualization techniques into consideration. As a result, it is difficult to get a high-level view of the network that facilitates rapid isolation of network attacks. We propose the Converged Securit y Visualization Tool (Cover-VT) to solve the efficient visualization problem. Cover-VT was designed to provide anal y sts with a high-level view of network threats using geographic information s y stems. The tool allows for rapid identification of threats b y minimizing the cognitive obstacles to efficient threat location. Cover-VT includes the capabilit y to drill-down on a node of interest for additional details and even filter out unwanted data. Cover-VT was designed with usabilit y in mind, making it eas y to comprehend while assisting the anal y st in rapid threat identification. Man y different securit y tools make up a securit y anal y st'S tool kit. Cover-VT was developed as an effective securit y visualization s y stem that integrates existing securit y tools and network securit y s y stems.

show abstract

Section: Introductionmentioning

confidence: 99%

Cover-VT: Converged Security Visualization Tool

Urbanski

Dunlop

Marchany

et al. 2011

12th IFIP/IEEE International Symposium on Integrated Network Management (IM 2011) and Workshops

Self Cite

View full text Add to dashboard Cite

show abstract

Leveraging Cognitive Principles to Improve Security Visualization

Dunlop

Urbanski

Marchany

et al. 2012

Networked Digital Technologies

View full text Add to dashboard Cite

A Survey on Information Visualization for Network and Service Management

Guimaraes

Freitas

Sadre

et al. 2016

IEEE Commun. Surv. Tutorials

View full text Add to dashboard Cite

Network and service management encompasses a set of activities, methods, procedures, and tools whose ultimate goal is to guarantee the proper functioning of a networked system. Computational tools are essential to help network administrators in their daily tasks, and information visualization techniques are of great value in such context. In essence, information visualization techniques associated to visual analytics aim at facilitating the tasks of network administrators in the process of monitoring and maintaining the network health. This paper surveys the use of information visualization techniques as a tool to support the network and service management process. Through a Systematic Literature Review (SLR), we provide a historical overview and discuss the current state of the art in the field. We present a classification of 285 articles and papers from 1985 to 2013, according to an information visualization taxonomy as well as a network and service management taxonomy. Finally, we point out future research directions and opportunities regarding the use of information visualization in network and service management.Taking into account the example mentioned above, [15] and [17] are examples of articles/papers that match with the research goal. Thus, they are stored and cataloged, and their references are verified. In the analysis of the references of [15], for example, we found the work of Koike et al. "Visualizing cyber attacks using IP matrix" [19]. On the other hand, [16] is an example of a work that was discarded after the analysis of the abstract and keywords (i.e., the second step of filtering).Once finished the search process, a set of 374 articles and papers remained selected. These publications are from a time interval ranging from 1985 to 2013.

show abstract

Using geographic information systems for enhanced network security visualization

Cited by 3 publications

References 8 publications

Cover-VT: Converged Security Visualization Tool

Cover-VT: Converged Security Visualization Tool

Leveraging Cognitive Principles to Improve Security Visualization

A Survey on Information Visualization for Network and Service Management

Contact Info

Product

Resources

About