Finding anomalies in time-series using visual correlation for interactive root cause analysis

  • Authors:
  • Florian Stoffel;Fabian Fischer;Daniel A. Keim

  • Affiliations:
  • University of Konstanz;University of Konstanz;University of Konstanz

  • Venue:
  • Proceedings of the Tenth Workshop on Visualization for Cyber Security
  • Year:
  • 2013

Quantified Score

Hi-index 0.00

Visualization

Abstract

Monitoring computer networks often includes gathering vast amounts of time-series data from thousands of computer systems and network devices. Threshold alerting is easy to accomplish with state-of-the-art technologies. However, to find correlations and similar behaviors between the different devices is challenging. We developed a visual analytics application to tackle this challenge by integrating similarity models and analytics combined with well-known, but task-adapted, time-series visualizations. We show in a case study, how this system can be used to visually identify correlations and anomalies in large data sets and identify and investigate security-related events.