Security analysts examine gigabytes of network data on a daily basis looking for signs of
intrusive behaviour. Command-line tools such as the System for Internet-Level Knowledge …

Although traditional methods of network security analysis used in investigating network
traffic and log files are essential to mitigating malicious network activity, these methods …

With the development of the Internet and organizational intranets, it has become an
increasingly critical and difficult task to monitor large and complex networks-indispensable …

Abstract NetBytes Host Viewer is an interactive visualization tool designed to show the
historical network flow data per port of an individual host machine or subnet on a network …

Computer network traffic visualizations deliver improved understanding of pattern-of-life for
networks, and such enhanced awareness can facilitate the detection of malicious traffic …

The first step in improving Internet security is measurement-security events must be made
visible. The irony in making this happen is that there is no lack of security measurement …

Network awareness is highly critical for network and security administrators. It enables
informed planning and management of network resources, as well as detection and a …

Network security is the art and science of detecting, stopping, and defending against current
and future network intrusion incidents. As attack tools get more sophisticated and more …

We present a visualization design to enhance the ability of an administrator to detect and
investigate anomalous traffic between a local network and external domains. Central to the …

We present several ways to correlate security events from two applications that visualize the
same underlying data with two distinct views: system and network. Correlation of security …