Sciweavers

Share
VIZSEC
2007
Springer

Visual Analysis of Network Flow Data with Timelines and Event Plots

9 years 6 months ago
Visual Analysis of Network Flow Data with Timelines and Event Plots
This paper describes Isis, a system that uses progressive multiples of timelines and event plots to support the iterative investigation of intrusions by experienced analysts using network flow data. The visual representations have been designed to make temporal relationships apparent, allow visual classification of events with dynamic brushing, and enable users to organize their visualizations to reveal traffic structure and patterns by reordering rows. Isis combines visual affordances with SQL to provide a flexible tool for investigation. We present an annotated case study using anonymized data of a real intrusion that demonstrates the features of Isis.
Doantam Phan, J. Gerth, M. Lee, Andreas Paepcke, T
Added 09 Jun 2010
Updated 09 Jun 2010
Type Conference
Year 2007
Where VIZSEC
Authors Doantam Phan, J. Gerth, M. Lee, Andreas Paepcke, Terry Winograd
Comments (0)
books