To effectively identify and respond to cyber threats, computer security analysts must
understand the scale, motivation, methods, source, and target of an attack. Central to …

This paper describes a web-based visualization system designed for network security
analysts at the US Army Research Laboratory (ARL). Our goal is to provide visual support to …

Plentiful, complex, and dynamic data make understanding the state of an enterprise network
difficult. Although visualization can help analysts understand baseline behaviors in network …

Computer networks have become critical to NATO operations. Much of NATO's computer
traffic runs over civilian networks, and NATO computers are accessible to a wide variety of …

The number of attacks against large computer systems is currently growing at a rapid pace.
Despite the best efforts of security analysts, large organizations are having trouble keeping …

We present several ways to correlate security events from two applications that visualize the
same underlying data with two distinct views: system and network. Correlation of security …

We present the design of a visualization technique based on the results of a human in the
loop process, which relied on network managers and network analysts. This visualization …

Effective visual analysis of computer network defense (CND) information is challenging due
to the volume and complexity of both the raw and analyzed network data. A typical CND is …

Networked computers are subject to attack, misuse, and abuse. Organizations and
individuals are making every effort to build and maintain trustworthy computing systems. The …

Many network visualizations make the assumption that an administrator has previously
determined the subset of data that should be visualized. Yet the problem remains that if the …