Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations

Kiran Lakkaraju; Ratna Bearavolu; Adam Slagell; William Yurcik; Stephen North

doi:10.1109/VIZSEC.2005.1532068

Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations

Kiran Lakkaraju, Ratna Bearavolu, Adam Slagell, William Yurcik, Stephen North

National Center for Supercomputing Applications (NCSA)

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

The field of security visualization is in need of a paradigm shift in order to allow visualization tools to be practically used by security engineers. Security engineers must complete two different tasks, that of Discovery of a pattern, and that of Searching for a pattern in a data set. Current security visualizations do not aid the user in creating symbolic rules that represent visual patterns. Transforming visual patterns to symbolic rules requires effort by the security engineer and detracts from their main task of discovering interesting patterns. In this paper we describe the idea of Closing-The-Loop - a system where symbolic rules are created from visual patterns.

Original language	English (US)
Title of host publication	IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings
Pages	75-82
Number of pages	8
DOIs	https://doi.org/10.1109/VIZSEC.2005.1532068
State	Published - 2005
Event	IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05 - Minneapolis, MN, United States Duration: Oct 26 2005 → Oct 26 2005

Publication series

Name	IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

Other

Other	IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05
Country	United States
City	Minneapolis, MN
Period	10/26/05 → 10/26/05

Keywords

Intrusion Detection Systems
Network Security
Security Visualization

ASJC Scopus subject areas

Engineering(all)

Access to Document

10.1109/VIZSEC.2005.1532068

Fingerprint Dive into the research topics of 'Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations'. Together they form a unique fingerprint.

Cite this

Lakkaraju, K., Bearavolu, R., Slagell, A., Yurcik, W., & North, S. (2005). Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations. In IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings (pp. 75-82). [1532068] (IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings). https://doi.org/10.1109/VIZSEC.2005.1532068

Closing-the-loop in NVisionIP : Integrating discovery and search in security visualizations. / Lakkaraju, Kiran; Bearavolu, Ratna; Slagell, Adam; Yurcik, William; North, Stephen.

IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings. 2005. p. 75-82 1532068 (IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Lakkaraju, K, Bearavolu, R, Slagell, A, Yurcik, W & North, S 2005, Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations. in IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings., 1532068, IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings, pp. 75-82, IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Minneapolis, MN, United States, 10/26/05. https://doi.org/10.1109/VIZSEC.2005.1532068

Lakkaraju K, Bearavolu R, Slagell A, Yurcik W, North S. Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations. In IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings. 2005. p. 75-82. 1532068. (IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings). https://doi.org/10.1109/VIZSEC.2005.1532068

@inproceedings{bb39b9f40b544d9d9036e5d2f7d1a326,

title = "Closing-the-loop in NVisionIP: Integrating discovery and search in security visualizations",

abstract = "The field of security visualization is in need of a paradigm shift in order to allow visualization tools to be practically used by security engineers. Security engineers must complete two different tasks, that of Discovery of a pattern, and that of Searching for a pattern in a data set. Current security visualizations do not aid the user in creating symbolic rules that represent visual patterns. Transforming visual patterns to symbolic rules requires effort by the security engineer and detracts from their main task of discovering interesting patterns. In this paper we describe the idea of Closing-The-Loop - a system where symbolic rules are created from visual patterns.",

keywords = "Intrusion Detection Systems, Network Security, Security Visualization",

author = "Kiran Lakkaraju and Ratna Bearavolu and Adam Slagell and William Yurcik and Stephen North",

year = "2005",

doi = "10.1109/VIZSEC.2005.1532068",

language = "English (US)",

isbn = "0780394771",

series = "IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings",

pages = "75--82",

booktitle = "IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings",

}

TY - GEN

T1 - Closing-the-loop in NVisionIP

T2 - IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05

AU - Lakkaraju, Kiran

AU - Bearavolu, Ratna

AU - Slagell, Adam

AU - Yurcik, William

AU - North, Stephen

PY - 2005

Y1 - 2005

N2 - The field of security visualization is in need of a paradigm shift in order to allow visualization tools to be practically used by security engineers. Security engineers must complete two different tasks, that of Discovery of a pattern, and that of Searching for a pattern in a data set. Current security visualizations do not aid the user in creating symbolic rules that represent visual patterns. Transforming visual patterns to symbolic rules requires effort by the security engineer and detracts from their main task of discovering interesting patterns. In this paper we describe the idea of Closing-The-Loop - a system where symbolic rules are created from visual patterns.

AB - The field of security visualization is in need of a paradigm shift in order to allow visualization tools to be practically used by security engineers. Security engineers must complete two different tasks, that of Discovery of a pattern, and that of Searching for a pattern in a data set. Current security visualizations do not aid the user in creating symbolic rules that represent visual patterns. Transforming visual patterns to symbolic rules requires effort by the security engineer and detracts from their main task of discovering interesting patterns. In this paper we describe the idea of Closing-The-Loop - a system where symbolic rules are created from visual patterns.

KW - Intrusion Detection Systems

KW - Network Security

KW - Security Visualization

UR - http://www.scopus.com/inward/record.url?scp=33749527089&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=33749527089&partnerID=8YFLogxK

U2 - 10.1109/VIZSEC.2005.1532068

DO - 10.1109/VIZSEC.2005.1532068

M3 - Conference contribution

AN - SCOPUS:33749527089

SN - 0780394771

SN - 9780780394773

SN - 0780394771

SN - 9780780394773

T3 - IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

SP - 75

EP - 82

BT - IEEE Workshop on Visualization for Computer Security 2005, VizSEC 05, Proceedings

Y2 - 26 October 2005 through 26 October 2005

ER -