Visual Analysis of Network Traffic for Resource Planning, Interactive Monitoring, and Interpretation of Security Threats
Visual Analysis of Network Traffic for Resource Planning, Interactive Monitoring, and Interpretation of Security Threats
复制标题
DOI：
10.1109/tvcg.2007.70522
复制
发表时间：
2007-11
影响因子：
5.2
通讯作者：
Florian Mansmann;D. Keim;S. North;B. Rexroad;D. Sheleheda
中科院分区：
文献类型：
--
作者：
Florian Mansmann;D. Keim;S. North;B. Rexroad;D. Sheleheda
互联网已经成为一个疯狂的地方：恶意代码在世界各地的个人电脑上传播，部署僵尸网络，准备攻击网络基础设施。大量的安全事件和其他异常现象阻碍了人工分析的尝试，特别是在监控服务提供商骨干链路时。我们提出了一种交互式可视化的方法，一个案例研究表明，交互式可视化可以应用到这些大型数据集获得更多的洞察力。我们在IP地址空间上建立了一个层次结构，并研究了每个层次结构的Treemap变体的适用性。由于查看整个IP层次结构一次是不实际的大多数任务，我们评估布局的稳定性时，省略大部分的层次结构，同时保持可见性和感兴趣的数据的顺序。
The Internet has become a wild place: malicious code is spread on personal computers across the world, deploying botnets ready to attack the network infrastructure. The vast number of security incidents and other anomalies overwhelms attempts at manual analysis, especially when monitoring service provider backbone links. We present an approach to interactive visualization with a case study indicating that interactive visualization can be applied to gain more insight into these large data sets. We superimpose a hierarchy on IP address space, and study the suitability of Treemap variants for each hierarchy level. Because viewing the whole IP hierarchy at once is not practical for most tasks, we evaluate layout stability when eliding large parts of the hierarchy, while maintaining the visibility and ordering of the data of interest.