This paper describes a software system that provides significant new capabilities for visualization and analysis of network
attack graphs produced through Topological Vulnerability Analysis (TVA). The TVA approach draws on a database of known exploits
and system vulnerabilities to provide a connected graph representing possible cyber-attack paths within a given network.
Our visualization approach builds on the extensive functionality of the yWorks suite of graphing tools, providing customized
new capabilities for importing, displaying, and interacting with large scale attack graphs, to facilitate comprehensive network
security analysis. These visualization capabilities include clustering of attack graph elements for reducing visual complexity,
a hierarchical dictionary of attack graph elements, high-level overview with detail drilldown, interactive on-graph hardening
of attacker exploits, and interactive graph layouts. This new visualization system is an integrated component of the CAULDRON
attack graph tool developed at George Mason University.
Keywords network security - attack graph - exploit analysis - vulnerability assessment - visualization - situational awareness