Concern level assessment: building domain knowledge into a visual system to support network-security situation awareness

Kodagoda, Neesha and Attfield, Simon and Choudhury, Sharmin (Tinni) and Rooney, Chris and Mapp, Glenford E. and Nguyen, Phong H. and Slabbert, Louis and Wong, B. L. William and Aiash, Mahdi and Zheng, Yongjun and Xu, Kai and Lasebae, Aboubaker (2013) Concern level assessment: building domain knowledge into a visual system to support network-security situation awareness. Information Visualization . ISSN 1473-8716 (Accepted/In press)

[img]
Preview
PDF
Download (780kB) | Preview
This item is available in: Library Catalogue

Abstract

Information officers and network administrators require tools to help them achieve situation awareness about potential network threats. We describe a response to mini-challenge 1 of the 2012 IEEE VAST challenge in which we developed a visual analytic solution to a network security situation awareness problem. To support conceptual design, we conducted a series of knowledge elicitation sessions with domain experts. These provided an understanding of the information they needed to make situation awareness judgements as well as a characterisation of those judgements in the form of production rules which define a parameter we called the ‘Concern Level Assessment’ (CLA). The CLA was used to provide heuristic guidance within a visual analytic system called MSIEVE. An analysis of VAST challenge assessment sessions using M-SIEVE provides some evidence that intelligent heuristics like this can provide useful guidance without unduly dominating interaction and understanding.

Item Type: Article
Additional Information: Published online before print June 27, 2013
Research Areas: A. > School of Science and Technology
A. > School of Science and Technology > Computer Science
A. > School of Science and Technology > Computer Science > SensoLab group
A. > School of Science and Technology > Computer and Communications Engineering
Item ID: 11017
Useful Links:
Depositing User: Kai Xu
Date Deposited: 24 Jul 2013 10:15
Last Modified: 13 Oct 2016 14:27
URI: http://eprints.mdx.ac.uk/id/eprint/11017

Actions (login required)

Edit Item Edit Item

Full text downloads (NB count will be zero if no full text documents are attached to the record)

Downloads per month over the past year