Network and service management encompasses a set of activities, methods, procedures,
and tools, whose ultimate goal is to guarantee the proper functioning of a networked system …

The analysis of computer files poses a difficult problem for security researchers seeking to
detect and analyze malicious content, software developers stress testing file formats for their …

Computer network defense (CND) requires analysts to detect both known and novel forms of
attacks in massive volumes of network data. It's through discovering the unexpected that …

Forensic analysis of malware activity in network environments is a necessary yet very costly
and time consuming part of incident response. Vast amounts of data need to be screened, in …

Information visualization is an effective way to easily comprehend large amounts of data. For
such systems to be truly effective, the information visualization designer must be aware of …

Network security analysis and ensemble data visualization are two active research areas.
Although they are treated as separate domains, they share many common challenges and …

This article presents SpiralView, a visualization tool for helping system administrators to
assess network policies. The tool is meant to be a complementary support to the routine …

Networked computers are ubiquitous, and are subject to attack, misuse, and abuse.
Automated systems to combat this threat are one potential solution, but most automated …

Most network traffic analysis applications are designed to discover malicious activity by only
relying on high-level flow-based message properties. However, to detect security breaches …

This article presents a framework for designing network security visualization systems as
well as results from the end-to-end design and implementation of two highly interactive …