IEEE Workshops on Visualization for Computer Security (VizSec'05)
Visual Firewall: Real-time Network Security Monito
Minneapolis, Minnesota
October 26-October 26
ISBN: 0-7803-9477-1
Networked systems still suffer from poor firewall configuration and monitoring. VisualFirewall seeks to aid in the configuration of firewalls and monitoring of networks by providing four simultaneous views that display varying levels of detail and time-scales as well as correctly visualizing firewall reactions to individual packets. The four implemented views: Real-Time Traffic, Visual Signature, Statistics, and IDS Alarm, provide the levels of detail and temporality that system administrators need to properly monitor their systems in a passive or an active manner. We have visualized several attacks, and we feel that even individuals unfamiliar with networking concepts can quickly distinguish between benign and malignant traffic patterns with a minimal amount of introduction.
Index Terms:
Network security, information visualization, user interfaces, firewall configuration, snort monitoring
Citation:
Chris P. Lee, Jason Trost, Nicholas Gibbs, Raheem Beyah, John A. Copeland, "Visual Firewall: Real-time Network Security Monito," vizsec, pp.16, IEEE Workshops on Visualization for Computer Security (VizSec'05), 2005