NVisionIP: netflow visualizations of system state for security situational awareness

  • Authors:
  • Kiran Lakkaraju;William Yurcik;Adam J. Lee

  • Affiliations:
  • University of Illinois at Urbana-Champaign, Champaign, IL;University of Illinois at Urbana-Champaign, Champaign, IL;University of Illinois at Urbana-Champaign, Champaign, IL

  • Venue:
  • Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

The number of attacks against large computer systems is currently growing at a rapid pace. Despite the best efforts of security analysts, large organizations are having trouble keeping on top of the current state of their networks. In this paper, we describe a tool called NVisionIP that is designed to increase the security analyst's situational awareness. As humans are inherently visual beings, NVisionIP uses a graphical representation of a class-B network to allow analysts to quickly visualize the current state of their network. We present an overview of NVisionIP along with a discussion of various types of security-related scenarios that it can be used to detect.