Weaving a Carpet from Log Entries
- We created a pixel map for multivariate data based on an analysis of the needs of network security engineers. Parameters of a log record are shown as pixels and these pixels are stacked to represent a record. This allows a broad view of a data set on one screen while staying very close to the raw data and to expose common and rare patterns of user behavior through the visualization itself (the "Carpet"). Visualizations that immediately point to areas of suspicious activity without requiring extensive filtering, help network engineers investigating unknown computer security incidents. Most of them, however, have limited knowledge of advanced visualization techniques, while many designers and data scientists are unfamiliar with computer security topics. To bridge this gap, we developed visualizations together with engineers, following a co-creative process. We will show how we explored the scope of the engineers' tasks and how we jointly developed ideas and designs. Our expert evaluation indicates that this visualization helps to scanWe created a pixel map for multivariate data based on an analysis of the needs of network security engineers. Parameters of a log record are shown as pixels and these pixels are stacked to represent a record. This allows a broad view of a data set on one screen while staying very close to the raw data and to expose common and rare patterns of user behavior through the visualization itself (the "Carpet"). Visualizations that immediately point to areas of suspicious activity without requiring extensive filtering, help network engineers investigating unknown computer security incidents. Most of them, however, have limited knowledge of advanced visualization techniques, while many designers and data scientists are unfamiliar with computer security topics. To bridge this gap, we developed visualizations together with engineers, following a co-creative process. We will show how we explored the scope of the engineers' tasks and how we jointly developed ideas and designs. Our expert evaluation indicates that this visualization helps to scan large parts of log files quickly and to define areas of interest for closer inspection.…
Verfasserangaben: | Johannes Landstorfer, Ivo Herrmann, Jan-Erik Stange, Marian DörkORCiD, Reto WettachORCiD |
---|---|
DOI: | https://doi.org/10.1109/VAST.2014.7042483 |
Titel des übergeordneten Werkes (Englisch): | 2014 IEEE Conference on Visual Analytics Science and Technology (VAST) : 25 - 31 Oct. [i.e. 9 - 14 November] 2014, Paris, France |
Untertitel (Englisch): | A Network Security Visualization Built with Co-Creation |
Verlag: | IEEE |
Verlagsort: | Piscataway, NJ |
Dokumentart: | Teil eines Buches (Kapitel) |
Sprache: | Englisch |
Datum der Veröffentlichung (online): | 07.06.2017 |
Jahr der Erstveröffentlichung: | 2014 |
Datum der Freischaltung: | 16.06.2017 |
GND-Schlagwort: | Rechnernetz; Visualisierung; Datensicherung; Informationstheorie |
Erste Seite: | 73 |
Letzte Seite: | 82 |
Fachbereiche und Zentrale Einrichtungen: | FB4 Design |
Forschungs- und An-Institute / Inst. für angewandte Forschung Urbane Zukunft (IaF) | |
DDC-Klassifikation: | 000 Informatik, Informationswissenschaft, allgemeine Werke |
Lizenz (Deutsch): | CC - Namensnennung-Keine kommerzielle Nutzung-Weitergabe unter gleichen Bedingungen |