See this document in CiteSeerX!

Preserving the Big Picture: Visual Network Traffic Analysis with TNV (2006)  (Make Corrections)  
John R. Goodall Wayne G. Lutters Penny Rheingans Anita Komlodi University of...



  Home/Search   Context   Related

 
View or download:
umbc.edu/~lutters/...ingans,Komlodi.pdf
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  umbc.edu/~lutters/publications (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: When performing packet-level analysis in intrusion detection, analysts often lose sight of the "big picture" while examining these low-level details. In order to prevent this loss of context and augment the available tools for intrusion detection analysis tasks, we developed an information visualization tool, the Time-based Network traffic Visualizer (TNV). TNV is grounded in an understanding of the work practices of intrusion detection analysts, particularly foregrounding the overarching... (Update)

Active bibliography (related documents):   More   All
1.3:   A User-Centered Approach to Visualizing Network.. - Goodall, Ozok.. (2005)   (Correct)
0.7:   VisFlowConnect-IP: An Animated Link Analysis Tool for.. - Yin, Yurcik, Slagell (2005)   (Correct)
0.6:   A User-centered Look at Glyph-based Security.. - Komlodi, Rheingans.. (2005)   (Correct)

Similar documents based on text:
0.0:   Unknown -   (Correct)

BibTeX entry:   (Update)

@misc{ wayne-preserving,
  author = "John Goodall Wayne",
  title = "Preserving the Big Picture: Visual Network Traffic Analysis with TNV",
  url = "citeseer.ist.psu.edu/757487.html" }
Citations (may not include all citations):
160   The perspective wall: Detail and context smoothly integrated (context) - Mackinlay, Robertson et al. - 1991
40   The plane with parallel coordinates (context) - Inselberg - 1985
34   Data base navigation: An office environment for the professi.. (context) - Spence, Apperley - 1982
24   Multidimensional detective (context) - Inselberg - 1997
21   Intrusion and misuse detection in large-scale systems (context) - Erbacher, Walker et al. - 2002
17   IEEE Transactions on Visualization and Computer Graphics (context) - Becker, Eick et al. - 1995
13   Visualizing the global topology of the MBone (context) - Munzner, Hoffman et al. - 1996
10   Clustering intrusion detection alarms to support root cause .. - Julisch - 2003
9   Intrusion and intrusion detection (context) - McHugh - 2001
9   Visual data mining: Recognizing telephone calling fraud - Cox, Eick et al. - 1997
9   Mining intrusion detection alarms for actionable knowledge - Julisch, Dacier - 2002
9   A visual approach for monitoring logs - Girardin, Brodbeck - 1998
8   Two visual computer network security monitoring tools incorp.. - Yurcik, Barlow et al. - 2003
8   VisFlowConnect: NetFlow visualizations of link relationships.. - Yin, Yurcik et al. - 2004
6   NVisionIP: NetFlow visualizations of system state for securi.. (context) - Lakkaraju, Yurcik et al. - 2004
4   Passive visual fingerprinting of network attack tools (context) - Conti, Abdullah - 2004
3   Home-centric visualization of network traffic for security a.. (context) - Ball, Fink et al. - 2004
3   The work of intrusion detection: Rethinking the role of secu.. - Goodall, Lutters et al. - 2004
2   Multinode monitoring and intrusion detection (context) - Erbacher, Teng et al. - 2002
2   PortVis: A tool for port-based detection of security events (context) - McPherson, Ma et al. - 2004
2   Visual problemsolving support for new event triage in centra.. - Stolze, Pawlitzek et al. - 2003
1   MIT Lincoln Laboratory (context) - Laboratory - 1999
1   I know my network: Collaboration and expertise in intrusion .. (context) - Goodall, Lutters et al. - 2004
1   Dynamic query tools for time series data sets: Timebox widge.. (context) - Hochheiser, Shneiderman - 2004
http://jpcap.sourceforge.net/
http://www.ethereal.com/
http://www.tcpdump.org/

Documents on the same site (http://www.research.umbc.edu/~lutters/publications.htm):   More
Recapturing What Was Lost: Re-emphasizing Locality in Social.. - Lutters, Hou (2005)   (Correct)
Conversations with the Past: Community, Technology and.. - Lutters (2004)   (Correct)
Why Use Memo for All? Restructuring Mobile Applications to.. - Dai, Lutters, Bower (2005)   (Correct)

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC