NVisionIP: NetFlow visualizations of system state for security situational awareness

Lakkaraju, K and Yurcik, W and Lee, AJ (2004) NVisionIP: NetFlow visualizations of system state for security situational awareness. In: UNSPECIFIED UNSPECIFIED, 65 - 72. ISBN 1581139748, 9781581139747

Plain Text (licence) Available under License : See the attached license file. Download (1kB)

Abstract

The number of attacks against large computer systems is currently growing at a rapid pace. Despite the best efforts of security analysts, large organizations are having trouble keeping on top of the current state of their networks. In this paper, we describe a tool called NVisionIP that is designed to increase the security analyst's situational awareness. As humans are inherently visual beings, NVisionIP uses a graphical representation of a class-B network to allow analysts to quickly visualize the current state of their network. We present an overview of NVisionIP along with a discussion of various types of security-related scenarios that it can be used to detect. Copyright 2004 ACM.

---

Share

Citation/Export:	Select format... Citation - Text Citation - HTML Endnote BibTex Dublin Core OpenURL MARC (ISO 2709) METS MODS EP3 XML Reference Manager Refer
Social Networking:	Share |

---

Details

Item Type:	Book Section
Status:	Published
Creators/Authors:	Creators Email Pitt Username ORCID Lakkaraju, K Yurcik, W Lee, AJ adamlee@pitt.edu ADAMLEE
Date:	1 December 2004
Date Type:	Publication
Journal or Publication Title:	VizSEC/DMSEC '04: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security
Page Range:	65 - 72
Event Type:	Conference
Schools and Programs:	Dietrich School of Arts and Sciences > Computer Science
Refereed:	Yes
ISBN:	1581139748, 9781581139747
Date Deposited:	05 Dec 2012 20:00
Last Modified:	02 Feb 2019 16:56
URI:	http://d-scholarship.pitt.edu/id/eprint/16542

---

Metrics

Monthly Views for the past 3 years

Plum Analytics

---

Actions (login required)

View Item