Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
My Menu
Saved Items

Mathematics and Visualization
VizSEC 2007
Proceedings of the Workshop on Visualization for Computer Security
10.1007/978-3-540-78243-8_7
John R. Goodall, Gregory Conti and Kwan-Liu Ma
NetBytes Viewer: An Entity-Based NetFlow Visualization Utility for Identifying Intrusive Behavior

T. TaylorContact Information, S. BrooksContact Information and J. McHughContact Information

(4)  Dalhousie University, Halifax, NS
Abstract
NetBytes Host Viewer is an interactive visualization tool designed to show the historical network flow data per port of an individual host machine or subnet on a network over time, using a 3D impulse graph plot. Such visualizations allow network administrators to quickly and effectively diagnose infected or malfunctioning computers by viewing data transmission patterns for each port on the entity. NetBytes has a set of interactive features which help to deal with the problems associated with displaying a 3D graph on a 2D screen. First, NetBytes offers a “selector” mode which allows the user to highlight specific ports (or times) on the graph using a slider and snap buttons. From the selector, the user can launch a set of 2D graphs (Bytes vs. Time and Bytes vs. Ports) to acquire more detailed information about the host with less clutter. Lastly, the user is able to rotate the 3D graph in any direction to mitigate occlusion. The long term objectives of this work include the integration of the NetBytes Viewer with complementary visualizations of the overall network. This application will integrate with a larger network analysis tool and be utilized as a drill-down mechanism.

Contact Information T. Taylor
Email: teryl@cs.dal.ca

Contact Information S. Brooks
Email: sbrooks@cs.dal.ca

Contact Information J. McHugh
Email: mchugh@cs.dal.ca
Fulltext Preview (Small, Large)
Image of the first page of the fulltext


Export this chapter
Export this chapter as RIS | Text
 
Remote Address: 38.107.191.112 • Server: mpweb04
HTTP User Agent: CCBot/1.0 (+http://www.commoncrawl.org/bot.html)