Computer networks have become critical to NATO operations. Much of NATO's computer
traffic runs over civilian networks, and NATO computers are accessible to a wide variety of …

Network vulnerabilities are increasingly rampant despite advances in Intrusion Detection
Systems (IDSs) and Intrusion Prevention Systems (IPSs). Even as funding and work by …

Information overload. If you're responsible for maintaining your network's security, you're
living with it every day. Logs, alerts, packet captures, and even binary files take time and …

This paper describes a web-based visualization system designed for network security
analysts at the US Army Research Laboratory (ARL). Our goal is to provide visual support to …

To effectively identify and respond to cyber threats, computer security analysts must
understand the scale, motivation, methods, source, and target of an attack. Central to …

Although traditional methods of network security analysis used in investigating network
traffic and log files are essential to mitigating malicious network activity, these methods …

Rapidly detecting and classifying malicious activity contained within network traffic is a
challenging problem exacerbated by large datasets and functionally limited manual analysis …

APPLIED SECURITY VISUALIZATION Collecting log data is one thing, having relevant
information is something else. The art to transform all kinds of log data into meaningful …

Data visualization is an indispensable means for analysis and communication, particularly in
cyber security. Promising techniques and systems for cyber data visualization have emerged …

Plentiful, complex, and dynamic data make understanding the state of an enterprise network
difficult. Although visualization can help analysts understand baseline behaviors in network …