Command line or pretty lines?: comparing textual and visual interfaces for intrusion detection
Command line or pretty lines?: comparing textual and visual interfaces for intrusion detection
复制标题
命令行还是漂亮的线条？：比较入侵检测的文本和可视界面
DOI：
10.1145/1240624.1240807
复制
发表时间：
2007
期刊：
影响因子：
--
通讯作者：
B. Bailey
中科院分区：
文献类型：
--
作者：
R. S. Thompson;Esa M. Rantanen;W. Yurcik;B. Bailey
入侵检测（ID）是网络安全工程师最重要的任务之一。文本（命令行）和可视化界面是用于支持 ID 工程师的两种常见方式。我们进行了一项对照实验，比较了 ID 的代表性文本和视觉界面，以更深入地了解各自的相对优势和劣势。我们发现，文本界面允许用户通过使用丰富、强大且灵活的命令来更好地控制数据细节的分析，而可视化界面则可以通过提供网络当前状态的概述来更好地发现新的攻击。有了这种理解，我们建议为用于入侵检测的下一代工具设计一个混合界面，结合文本和可视界面的优势。
Intrusion detection (ID) is one of network security engineers' most important tasks. Textual (command-line) and visual interfaces are two common modalities used to support engineers in ID. We conducted a controlled experiment comparing a representative textual and visual interface for ID to develop a deeper understanding about the relative strengths and weaknesses of each. We found that the textual interface allows users to better control the analysis of details of the data through the use of rich, powerful, and flexible commands while the visual interface allows better discovery of new attacks by offering an overview of the current state of the network. With this understanding, we recommend designing a hybrid interface that combines the strengths of textual and visual interfaces for the next generation of tools used for intrusion detection.