A Component-Based Framework for Visualization of Intrusion Detection Events

Authors:
Andy Luse;Kevin P. Scheibe;Anthony M. Townsend
Affiliations:
Computer Engineering, Iowa State University, Ames, IA, USA;Iowa State University, Ames, IA, USA;Iowa State University, Ames, IA, USA
Venue:
Information Security Journal: A Global Perspective
Year:
2008

Citing 34
Cited 1

An Intrusion-Detection Model

IEEE Transactions on Software Engineering - Special issue on computer security and privacy
Designing the user interface (videotape)

Designing the user interface (videotape)
Readings in information visualization: using vision to think

Readings in information visualization: using vision to think
Practical Intrusion Detection Handbook

Practical Intrusion Detection Handbook
Information Visualization in Data Mining and Knowledge Discovery

Information Visualization in Data Mining and Knowledge Discovery
Business Visualization Applications

IEEE Computer Graphics and Applications
Network Visualization with Nam, the VINT Network Animator

Computer
Defending Yourself: The Role of Intrusion Detection Systems

IEEE Software
Design of a Visual Browser for Network Intrusion Detection

WETICE '01 Proceedings of the 10th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises
Network Intrusion Visualization with NIVA, an Intrusion Detection Visual Analyzer with Haptic Integration

HAPTICS '02 Proceedings of the 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems
The Spinning Cube of Potential Doom

Communications of the ACM - Wireless sensor networks
VisFlowConnect: netflow visualizations of link relationships for security situational awareness

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
Home-centric visualization of network traffic for security administration

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
NVisionIP: netflow visualizations of system state for security situational awareness

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
PortVis: a tool for port-based detection of security events

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
CyberSeer: 3D audio-visual immersion for network security and management

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
Statistical profiling and visualization for detection of malicious insider attacks on computer networks

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
SnortView: visualization system of snort logs

Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
MieLog: A Highly Interactive Visual Log Browser Using Information Visualization and Statistical Analysis

LISA '02 Proceedings of the 16th USENIX conference on System administration
A user-centered approach to visualizing network traffic for intrusion detection

CHI '05 Extended Abstracts on Human Factors in Computing Systems
An Information Visualization Framework for Intrusion Detection

CHI '04 Extended Abstracts on Human Factors in Computing Systems
IDGraphs: Intrusion Detection and Analysis Using Histographs

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
Visualizing Cyber Attacks using IP Matrix

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
Exploring Three-dimensional Visualization for Intrusion Detection

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
Visual Firewall: Real-time Network Security Monito

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
IDS RainStorm: Visualizing IDS Alarms

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
A User-centered Look at Glyph-based Security Visualization

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
Preserving the Big Picture: Visual Network Traffic Analysis with TN

VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
Visual Correlation of Network Alerts

IEEE Computer Graphics and Applications
Information Dashboard Design: The Effective Visual Communication of Data

Information Dashboard Design: The Effective Visual Communication of Data
A Framework for Visualizing Information (Human-Computer Interaction Series)

A Framework for Visualizing Information (Human-Computer Interaction Series)
Concept maps: integrating knowledge and information visualization

Knowledge and Information Visualization
Intrusion detection: a brief history and overview

Computer
Information visualization and its application to medicine

Artificial Intelligence in Medicine

SPTrack: visual analysis of information flows within SELinux policies and attack logs

AMT'12 Proceedings of the 8th international conference on Active Media Technology

Quantified Score

Hi-index	0.00

Visualization

Abstract

Visualization systems for intrusion detection are becoming more prevalent, but the lack of an organizing framework for proper development of these systems is problematic. This paper introduces a component-based structure that can be used to adequately design and implement intrusion detection information visualization systems. This component-based structure implements a combination of common information visualization components with operational components specific to the critical, real-time nature of intrusion detection. The manuscript also performs an analysis of intrusion detection visualization research projects by verifying their use of the components described by this framework.