The Community for Technology Leaders
RSS Icon
Subscribe
Issue No.05 - September/October (2007 vol.27)
pp: 20-27
Anita D. D'Amico , Applied Visions
John R. Goodall , Applied Visions
Daniel R. Tesone , Applied Visions
Jason K. Kopylec , Applied Visions
ABSTRACT
Computer network defense (CND) requires analysts to detect both known and novel forms of attacks in massive volumes of network data. Visualization tools can potentially assist in the discovery of suspicious patterns of network activity and relationships between seemingly disparate security events, but few CND analysts are leveraging visualization technologies in their current practice. To address this, we created a new visualization framework, VIAssist, based on a comprehensive cognitive task analysis of CND analysts. We designed VIAssist to fit the work practices and operational environments of those analysts. This article describes the major visual analytic features of VIAssist that address the needs of CND analysts, including its coordinated visualizations and interactive report building capabilities. A scenario illustrates how it can be used to discover the unexpected in network flow data.
INDEX TERMS
visual analytics, information visualization, information security, situational awareness, user-centered design
CITATION
Anita D. D'Amico, John R. Goodall, Daniel R. Tesone, Jason K. Kopylec, "Visual Discovery in Computer Network Defense", IEEE Computer Graphics and Applications, vol.27, no. 5, pp. 20-27, September/October 2007, doi:10.1109/MCG.2007.137
REFERENCES
1. A. D'Amico et al., "Achieving Cyber Defense Situational Awareness: A Cognitive Task Analysis of Information Assurance Analysts," Proc. Human Factors and Ergonomics Soc. 49th Ann. Meeting, HFES Press, 2005, pp. 229–233.
2. A. D'Amico and M. Larkin, "Methods of Visualizing Temporal Patterns in and Mission Impact of Computer Security Breaches," DARPA Information Survivability Conf. and Exposition (DISCEX II), IEEE Press, 2001, pp. 343–354.
3. DTO Reference Data Set 4s4, Skaion Corp., North Chelmsford, Mass., 2005.
10 ms
(Ver 2.0)

Marketing Automation Platform Marketing Automation Tool