As the trend of successful network attacks continue to rise, better forms of intrusion detection
and prevention are needed. This paper addresses network traffic visualization techniques …

Rapidly detecting and classifying malicious activity contained within network traffic is a
challenging problem exacerbated by large datasets and functionally limited manual analysis …

Network security depends heavily on automated Intrusion Detection Systems (IDS) to sense
malicious activity. Unfortunately, IDS often deliver both too much raw information, and an …

We present several ways to correlate security events from two applications that visualize the
same underlying data with two distinct views: system and network. Correlation of security …

This paper describes Isis, a system that uses progressive multiples of timelines and event
plots to support the iterative investigation of intrusions by experienced analysts using …

The frequent and large-scale network attacks have led to an increased need for developing
techniques for analyzing network traffic. If efficient analysis tools were available, it could …

Visualized information is a technique that can encode large amounts of complex interrelated
data, being at the same time easily quantified, manipulated, and processed by a human …

Most visualizations of security-related network data require large amounts of finely detailed,
high-dimensional data. However, in some cases, the data available can only be coarsely …

Abstract NetBytes Host Viewer is an interactive visualization tool designed to show the
historical network flow data per port of an individual host machine or subnet on a network …

We present NetGrok, a tool for visualizing computer network usage in real-time. NetGrok
combines well-known information visualization techniques—overview, zoom & filter, details …