Envisioning information
Graphical analysis of computer log files
Communications of the ACM
The grammar of graphics
Semiology of graphics
IDS RainStorm: Visualizing IDS Alarms
VIZSEC '05 Proceedings of the IEEE Workshops on Visualization for Computer Security
FloVis: Flow Visualization System
CATCH '09 Proceedings of the 2009 Cybersecurity Applications & Technology Conference for Homeland Security
AutoVis: automatic visualization
Information Visualization
Picviz: finding a needle in a haystack
WASL'08 Proceedings of the First USENIX conference on Analysis of system logs
Bridging the gaps: joining information sources with Splunk
SLAML'10 Proceedings of the 2010 workshop on Managing systems via log analysis and machine learning techniques
IEEE Transactions on Visualization and Computer Graphics
Advances and challenges in log analysis
Communications of the ACM
| Hi-index | 0.00 |
In this article, we propose ELVIS, a security-oriented log visualization tool that allows security experts to visually explore numerous types of log files through relevant representations. When a log file is loaded into ELVIS, a summary view is displayed. This view is the starting point for exploring the log. The analyst can then choose to explore certain fields or sets of fields from the dataset. To that end, ELVIS selects relevant representations according to the fields chosen by the analyst for display.