@incollection{LandstorferHerrmannStangeetal., author = {Landstorfer, Johannes and Herrmann, Ivo and Stange, Jan-Erik and D{\"o}rk, Marian and Wettach, Reto}, title = {Weaving a Carpet from Log Entries}, series = {2014 IEEE Conference on Visual Analytics Science and Technology (VAST) : 25 - 31 Oct. [i.e. 9 - 14 November] 2014, Paris, France}, booktitle = {2014 IEEE Conference on Visual Analytics Science and Technology (VAST) : 25 - 31 Oct. [i.e. 9 - 14 November] 2014, Paris, France}, publisher = {IEEE}, address = {Piscataway, NJ}, doi = {10.1109/VAST.2014.7042483}, pages = {73 -- 82}, abstract = {We created a pixel map for multivariate data based on an analysis of the needs of network security engineers. Parameters of a log record are shown as pixels and these pixels are stacked to represent a record. This allows a broad view of a data set on one screen while staying very close to the raw data and to expose common and rare patterns of user behavior through the visualization itself (the "Carpet"). Visualizations that immediately point to areas of suspicious activity without requiring extensive filtering, help network engineers investigating unknown computer security incidents. Most of them, however, have limited knowledge of advanced visualization techniques, while many designers and data scientists are unfamiliar with computer security topics. To bridge this gap, we developed visualizations together with engineers, following a co-creative process. We will show how we explored the scope of the engineers' tasks and how we jointly developed ideas and designs. Our expert evaluation indicates that this visualization helps to scan large parts of log files quickly and to define areas of interest for closer inspection.}, subject = {Rechnernetz}, language = {en} } @incollection{StangeLandstorferDoerketal., author = {Stange, Jan-Erik and Landstorfer, Johannes and D{\"o}rk, Marian and Wettach, Reto}, title = {Visual Filter}, series = {Proceedings of the Eleventh Workshop on Visualization for Cyber Security (VizSec '14)}, booktitle = {Proceedings of the Eleventh Workshop on Visualization for Cyber Security (VizSec '14)}, publisher = {ACM}, address = {New York, NY}, isbn = {978-1-4503-2826-5}, doi = {10.1145/2671491.2671503}, pages = {41 -- 48}, abstract = {Network log files often need to be investigated manually for suspicious activity. The huge amount of log lines complicates maintaining an overview, navigation and quick pattern identification. We propose a system that uses an interactive visualization, a visual filter, representing the whole log in an overview, allowing to navigate and make context-preserving subselections with the visualization and in this way reducing the time and effort for security experts needed to identify patterns in the log file. This explorative interactive visualization is combined with focused querying to search for known suspicious terms that are then highlighted in the visualization and the log file itself.}, subject = {Computergrafik}, language = {en} } @inproceedings{LandstorferPschetzKloesetal., author = {Landstorfer, Johannes and Pschetz, Larissa and Kloes, Malte and Wettach, Reto}, title = {SocialButton}, series = {NGMAST '07 : Proceedings of the The 2007 International Conference on Next Generation Mobile Applications, Services and Technologies}, booktitle = {NGMAST '07 : Proceedings of the The 2007 International Conference on Next Generation Mobile Applications, Services and Technologies}, publisher = {IEEE Computer Society Press}, address = {Washington}, organization = {The Institute of Electrical and Electronics Engineers (IEEE)}, isbn = {978-0-7695-2878-6}, doi = {10.1109/NGMAST.2007.4343395}, pages = {14 -- 18}, abstract = {We are exploring the use of small displays as an instrument to enhance social communication. Our focus is on encouraging communication between strangers by revealing the existence of common friends. In the following we present the concept of the SocialButton, a wearable mobile device which displays aspects of friend-of-a-friend networks. A group study has provided us with an initial understanding regarding the potential of the SocialButton to influence our social environment.}, subject = {Handy}, language = {en} }