Visualization for Computer Security

1. Front Matter

   PDF

2. Visual Reverse Engineering of Binary and Data Files

   • Gregory Conti, Erik Dean, Matthew Sinda, Benjamin Sangster

   Pages 1-17

3. Effective Visualization of File System Access-Control

   • Alexander Heitzmann, Bernardo Palazzi, Charalampos Papamanthou, Roberto Tamassia

   Pages 18-25

4. Visual Analysis of Program Flow Data with Data Propagation

   • Ying Xia, Kevin Fairbanks, Henry Owen

   Pages 26-35

5. A Term Distribution Visualization Approach to Digital Forensic String Search

   • Moses Schwartz, L. M. Liebrock

   Pages 36-43

6. GARNET: A Graphical Attack Graph and Reachability Network Evaluation Tool

   • Leevar Williams, Richard Lippmann, Kyle Ingols

   Pages 44-59

7. A Graph-Theoretic Visualization Approach to Network Risk Analysis

   • Scott O’Hare, Steven Noel, Kenneth Prole

   Pages 60-67

8. Improving Attack Graph Visualization through Data Reduction and Attack Grouping

   • John Homer, Ashok Varikuti, Xinming Ou, Miles A. McQueen

   Pages 68-79

9. Show Me How You See: Lessons from Studying Computer Forensics Experts for Visualization

   • T. J. Jankun-Kelly, Josh Franck, David Wilson, Jeffery Carver, David Dampier, J. Edward Swan II

   Pages 80-86

10. A Task Centered Framework for Computer Security Data Visualization

    • Xiaoyuan Suo, Ying Zhu, Scott Owen

    Pages 87-94

11. BGPeep: An IP-Space Centered View for Internet Routing Data

    • James Shearer, Kwan-Liu Ma, Toby Kohlenberg

    Pages 95-110

12. Large-Scale Network Monitoring for Visual Analysis of Attacks

    • Fabian Fischer, Florian Mansmann, Daniel A. Keim, Stephan Pietzko, Marcel Waldvogel

    Pages 111-118

13. Visualizing Real-Time Network Resource Usage

    • Ryan Blue, Cody Dunne, Adam Fuchs, Kyle King, Aaron Schulman

    Pages 119-135

14. Wireless Cyber Assets Discovery Visualization

    • Kenneth Prole, John R. Goodall, Anita D. D’Amico, Jason K. Kopylec

    Pages 136-143

15. NetFlow Data Visualization Based on Graphs

    • Pavel Minarik, Tomas Dymacek

    Pages 144-151

16. Backhoe, a Packet Trace and Log Browser

    • Sergey Bratus, Axel Hansen, Fabio Pellacini, Anna Shubina

    Pages 152-160

17. Existence Plots: A Low-Resolution Time Series for Port Behavior Analysis

    • Jeff Janies

    Pages 161-168

18. Using Time Series 3D AlertGraph and False Alert Classification to Analyse Snort Alerts

    • Shahrulniza Musa, David J. Parish

    Pages 169-180

19. Network Traffic Exploration Application: A Tool to Assess, Visualize, and Analyze Network Security Events

    • Grant Vandenberghe

    Pages 181-196

20. Back Matter

    PDF

This book constitutes the refereed proceedings of the 5th International Workshop on Visualization for Cyber Security held on September 15, 2008, in Cambridge, Massachusetts, USA, in conjunction with the 11th International Symposium on Recent Advances in Intrusion Detection (RAID). The 18 papers presented in this volume were carefully reviewed and selected from 27 submissions. VizSec research has focused on helping human analysts to detect anomalies and patterns, particularly in computer network defense. This year's paper focus on bridging the gap between visualization and automation.

• Bridge
• Bridging
• computer forensics
• cyber security
• data visualizaion
• information security
• information visualization
• network monitoring
• network traffic exploration
• reachability
• reverse engineering
• risk analysis
• visualization
• vizsec

Policies and ethics