Network Traffic Exploration Application: A Tool to Assess, Visualize, and Analyze Network Security Events

Authors:
Grant Vandenberghe
Affiliations:
Network Information Operations Section, Defence Research and Development Canada (DRDC),
Venue:
VizSec '08 Proceedings of the 5th international workshop on Visualization for Computer Security
Year:
2008

Citing 6
Cited 1

Network Intrusion Detection: An Analyst's Handbook

Network Intrusion Detection: An Analyst's Handbook
Intrusion Signatures and Analysis

Intrusion Signatures and Analysis
Infranet: Circumventing Web Censorship and Surveillance

Proceedings of the 11th USENIX Security Symposium
The Tao Of Network Security Monitoring: Beyond Intrusion Detection

The Tao Of Network Security Monitoring: Beyond Intrusion Detection
Web tap: detecting covert web traffic

Proceedings of the 11th ACM conference on Computer and communications security
A Comprehensive Approach to Intrusion Detection Alert Correlation

IEEE Transactions on Dependable and Secure Computing

Network forensic frameworks: Survey and research challenges

Digital Investigation: The International Journal of Digital Forensics & Incident Response

Quantified Score

Hi-index	0.01

Visualization

Abstract

Defence Research and Development Canada (DRDC) is developing a security event / packet analysis tool that is useful for analyzing a wide range of network attacks. The tool allows the security analyst to visually analyze a security event from a broad range of visual perspectives using a variety of detection algorithms. The tool is easy to extend and can be used to generate automated analysis scripts. The system architecture is presented and its capabilities are demonstrated through the analysis of several covert tunnels.