Visual analytics for network flow analysis

John R. Goodall; Daniel R. Tesone

doi:10.1109/CATCH.2009.47

Visual analytics for network flow analysis

John R. Goodall, Daniel R. Tesone

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

12 Scopus citations

Abstract

Large corporations and government agencies are continually bombarded by malicious network attacks through the cyber infrastructure. One common method to identify and assess the impacts of these malicious activities is through the monitoring and analysis of network flow data. While already somewhat aggregated, the data can quickly become overwhelming - a billion flow records a day for large organizations is not abnormal. We have integrated our visual analytics toolkit with network flow data to provide a seamless workflow for computer network defense analysts. This integration can facilitate the learning process of novice analysts and make expert analysts more productive.

Original language	English
Title of host publication	Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009
Pages	199-204
Number of pages	6
DOIs	https://doi.org/10.1109/CATCH.2009.47
State	Published - 2009
Externally published	Yes
Event	Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009 - Washington, DC, United States Duration: Mar 3 2009 → Mar 4 2009

Publication series

Name	Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

Conference

Conference	Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009
Country/Territory	United States
City	Washington, DC
Period	03/3/09 → 03/4/09

Access to Document

10.1109/CATCH.2009.47

Cite this

@inproceedings{0145bb717e284538a3a1719e000eb469,

title = "Visual analytics for network flow analysis",

abstract = "Large corporations and government agencies are continually bombarded by malicious network attacks through the cyber infrastructure. One common method to identify and assess the impacts of these malicious activities is through the monitoring and analysis of network flow data. While already somewhat aggregated, the data can quickly become overwhelming - a billion flow records a day for large organizations is not abnormal. We have integrated our visual analytics toolkit with network flow data to provide a seamless workflow for computer network defense analysts. This integration can facilitate the learning process of novice analysts and make expert analysts more productive.",

author = "{R. Goodall}, John and {R. Tesone}, Daniel",

year = "2009",

doi = "10.1109/CATCH.2009.47",

language = "English",

isbn = "9780769535685",

series = "Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009",

pages = "199--204",

booktitle = "Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009",

note = "Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009 ; Conference date: 03-03-2009 Through 04-03-2009",

}

R. Goodall, J & R. Tesone, D 2009, Visual analytics for network flow analysis. in Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009., 4804444, Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009, pp. 199-204, Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009, Washington, DC, United States, 03/3/09. https://doi.org/10.1109/CATCH.2009.47

Visual analytics for network flow analysis. / R. Goodall, John; R. Tesone, Daniel.
Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009. 2009. p. 199-204 4804444 (Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Visual analytics for network flow analysis

AU - R. Goodall, John

AU - R. Tesone, Daniel

PY - 2009

Y1 - 2009

N2 - Large corporations and government agencies are continually bombarded by malicious network attacks through the cyber infrastructure. One common method to identify and assess the impacts of these malicious activities is through the monitoring and analysis of network flow data. While already somewhat aggregated, the data can quickly become overwhelming - a billion flow records a day for large organizations is not abnormal. We have integrated our visual analytics toolkit with network flow data to provide a seamless workflow for computer network defense analysts. This integration can facilitate the learning process of novice analysts and make expert analysts more productive.

AB - Large corporations and government agencies are continually bombarded by malicious network attacks through the cyber infrastructure. One common method to identify and assess the impacts of these malicious activities is through the monitoring and analysis of network flow data. While already somewhat aggregated, the data can quickly become overwhelming - a billion flow records a day for large organizations is not abnormal. We have integrated our visual analytics toolkit with network flow data to provide a seamless workflow for computer network defense analysts. This integration can facilitate the learning process of novice analysts and make expert analysts more productive.

UR - http://www.scopus.com/inward/record.url?scp=66249090857&partnerID=8YFLogxK

U2 - 10.1109/CATCH.2009.47

DO - 10.1109/CATCH.2009.47

M3 - Conference contribution

AN - SCOPUS:66249090857

SN - 9780769535685

T3 - Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

SP - 199

EP - 204

BT - Proceedings - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

T2 - Cybersecurity Applications and Technology Conference for Homeland Security, CATCH 2009

Y2 - 3 March 2009 through 4 March 2009

ER -

Visual analytics for network flow analysis

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this