The Border Gateway Protocol (BGP) is the default Internet routing protocol that manages
connectivity among Autonomous Systems (ASes). Although BGP disruptions are rare, when …

Today's system administrators, burdened by rapidly increasing network activity, must quickly
perceive the security state of their networks, but they often have only text-based tools to work …

The Internet has become a wild place: malicious code is spread on personal computers
across the world, deploying botnets ready to attack the network infrastructure. The vast …

Most visualizations of security-related network data require large amounts of finely detailed,
high-dimensional data. However, in some cases, the data available can only be coarsely …

Analysis of voluminous computer network data has become a common practice for cyber
defense, but few tools provide adequate support for cyber-infrastructure defenders' workflow …

Differentiating anomalous network activity from normal network traffic is difficult and tedious.
A human analyst must search through vast amounts of data to find anomalous sequences of …

We present several ways to correlate security events from two applications that visualize the
same underlying data with two distinct views: system and network. Correlation of security …

Detecting, analyzing, and defending against cyber threats is an important topic in cyber
security. Applying machine learning techniques to detect such threats has received …

Traffic anomalies in communication networks greatly degrade network performance. Early
detection of such anomalies alleviates their effect on network performance. A number of …

Many methods have been developed for monitoring network traffic, both using visualization
and statistics. Most of these methods focus on the detection of suspicious or malicious …