Weaving a Carpet from Log Entries

  • We created a pixel map for multivariate data based on an analysis of the needs of network security engineers. Parameters of a log record are shown as pixels and these pixels are stacked to represent a record. This allows a broad view of a data set on one screen while staying very close to the raw data and to expose common and rare patterns of user behavior through the visualization itself (the "Carpet"). Visualizations that immediately point to areas of suspicious activity without requiring extensive filtering, help network engineers investigating unknown computer security incidents. Most of them, however, have limited knowledge of advanced visualization techniques, while many designers and data scientists are unfamiliar with computer security topics. To bridge this gap, we developed visualizations together with engineers, following a co-creative process. We will show how we explored the scope of the engineers' tasks and how we jointly developed ideas and designs. Our expert evaluation indicates that this visualization helps to scanWe created a pixel map for multivariate data based on an analysis of the needs of network security engineers. Parameters of a log record are shown as pixels and these pixels are stacked to represent a record. This allows a broad view of a data set on one screen while staying very close to the raw data and to expose common and rare patterns of user behavior through the visualization itself (the "Carpet"). Visualizations that immediately point to areas of suspicious activity without requiring extensive filtering, help network engineers investigating unknown computer security incidents. Most of them, however, have limited knowledge of advanced visualization techniques, while many designers and data scientists are unfamiliar with computer security topics. To bridge this gap, we developed visualizations together with engineers, following a co-creative process. We will show how we explored the scope of the engineers' tasks and how we jointly developed ideas and designs. Our expert evaluation indicates that this visualization helps to scan large parts of log files quickly and to define areas of interest for closer inspection.zeige mehrzeige weniger

Metadaten exportieren

Weitere Dienste

Suche bei Google Scholar
Metadaten
Verfasserangaben:Johannes Landstorfer, Ivo Herrmann, Jan-Erik Stange, Marian DörkORCiD, Reto WettachORCiD
DOI:https://doi.org/10.1109/VAST.2014.7042483
Titel des übergeordneten Werkes (Englisch):2014 IEEE Conference on Visual Analytics Science and Technology (VAST) : 25 - 31 Oct. [i.e. 9 - 14 November] 2014, Paris, France
Untertitel (Englisch):A Network Security Visualization Built with Co-Creation
Verlag:IEEE
Verlagsort:Piscataway, NJ
Dokumentart:Teil eines Buches (Kapitel)
Sprache:Englisch
Datum der Veröffentlichung (online):07.06.2017
Jahr der Erstveröffentlichung:2014
Datum der Freischaltung:16.06.2017
GND-Schlagwort:Rechnernetz; Visualisierung; Datensicherung; Informationstheorie
Erste Seite:73
Letzte Seite:82
Fachbereiche und Zentrale Einrichtungen:FB4 Design
Forschungs- und An-Institute / Inst. für angewandte Forschung Urbane Zukunft (IaF)
DDC-Klassifikation:000 Informatik, Informationswissenschaft, allgemeine Werke
Lizenz (Deutsch):License LogoCC - Namensnennung-Keine kommerzielle Nutzung-Weitergabe unter gleichen Bedingungen
Einverstanden ✔
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.