<?xml version="1.0" encoding="utf-8"?>
<export-example>
  <doc>
    <id>1588</id>
    <completedYear/>
    <publishedYear>2014</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>41</pageFirst>
    <pageLast>48</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>bookpart</type>
    <publisherName>ACM</publisherName>
    <publisherPlace>New York, NY</publisherPlace>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2017-06-07</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Visual Filter</title>
    <abstract language="eng">Network log files often need to be investigated manually for suspicious activity. The huge amount of log lines complicates maintaining an overview, navigation and quick pattern identification. We propose a system that uses an interactive visualization, a visual filter, representing the whole log in an overview, allowing to navigate and make context-preserving subselections with the visualization and in this way reducing the time and effort for security experts needed to identify patterns in the log file. This explorative interactive visualization is combined with focused querying to search for known suspicious terms that are then highlighted in the visualization and the log file itself.</abstract>
    <parentTitle language="eng">Proceedings of the Eleventh Workshop on Visualization for Cyber Security (VizSec '14)</parentTitle>
    <subTitle language="eng">Graphical Exploration of Network Security Log Files</subTitle>
    <identifier type="doi">10.1145/2671491.2671503</identifier>
    <identifier type="isbn">978-1-4503-2826-5</identifier>
    <author>Jan-Erik Stange</author>
    <author>Johannes Landstorfer</author>
    <author>Marian Dörk</author>
    <author>Reto Wettach</author>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Computergrafik</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Rechnernetz</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Mensch-Maschine-Schnittstelle</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Visualisierung</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Datensicherung</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Mustererkennung</value>
    </subject>
    <collection role="ddc" number="000">Informatik, Informationswissenschaft, allgemeine Werke</collection>
    <collection role="institutes" number="">Inst. für angewandte Forschung Urbane Zukunft (IaF)</collection>
  </doc>
  <doc>
    <id>1581</id>
    <completedYear/>
    <publishedYear>2014</publishedYear>
    <thesisYearAccepted/>
    <language>eng</language>
    <pageFirst>73</pageFirst>
    <pageLast>82</pageLast>
    <pageNumber/>
    <edition/>
    <issue/>
    <volume/>
    <type>bookpart</type>
    <publisherName>IEEE</publisherName>
    <publisherPlace>Piscataway, NJ</publisherPlace>
    <creatingCorporation/>
    <contributingCorporation/>
    <belongsToBibliography>1</belongsToBibliography>
    <completedDate>2017-06-07</completedDate>
    <publishedDate>--</publishedDate>
    <thesisDateAccepted>--</thesisDateAccepted>
    <title language="eng">Weaving a Carpet from Log Entries</title>
    <abstract language="eng">We created a pixel map for multivariate data based on an analysis of the needs of network security engineers. Parameters of a log record are shown as pixels and these pixels are stacked to represent a record. This allows a broad view of a data set on one screen while staying very close to the raw data and to expose common and rare patterns of user behavior through the visualization itself (the "Carpet"). Visualizations that immediately point to areas of suspicious activity without requiring extensive filtering, help network engineers investigating unknown computer security incidents. Most of them, however, have limited knowledge of advanced visualization techniques, while many designers and data scientists are unfamiliar with computer security topics. To bridge this gap, we developed visualizations together with engineers, following a co-creative process. We will show how we explored the scope of the engineers' tasks and how we jointly developed ideas and designs. Our expert evaluation indicates that this visualization helps to scan large parts of log files quickly and to define areas of interest for closer inspection.</abstract>
    <parentTitle language="eng">2014 IEEE Conference on Visual Analytics Science and Technology (VAST) : 25 - 31 Oct. [i.e. 9 - 14 November] 2014, Paris, France</parentTitle>
    <subTitle language="eng">A Network Security Visualization Built with Co-Creation</subTitle>
    <identifier type="doi">10.1109/VAST.2014.7042483</identifier>
    <author>Johannes Landstorfer</author>
    <author>Ivo Herrmann</author>
    <author>Jan-Erik Stange</author>
    <author>Marian Dörk</author>
    <author>Reto Wettach</author>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Rechnernetz</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Visualisierung</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Datensicherung</value>
    </subject>
    <subject>
      <language>deu</language>
      <type>swd</type>
      <value>Informationstheorie</value>
    </subject>
    <collection role="ddc" number="000">Informatik, Informationswissenschaft, allgemeine Werke</collection>
    <collection role="institutes" number="">FB4 Design</collection>
    <collection role="institutes" number="">Inst. für angewandte Forschung Urbane Zukunft (IaF)</collection>
  </doc>
</export-example>
