M-Sieve: a visualisation tool for supporting network security analysts

Choudhury, Sharmin (Tinni), Kodagoda, Neesha, Nguyen, Phong H., Rooney, Chris, Attfield, Simon ORCID: https://orcid.org/0000-0001-9374-2481, Xu, Kai ORCID: https://orcid.org/0000-0003-2242-5440, Zheng, Yongjun, Wong, B. L. William ORCID: https://orcid.org/0000-0002-3363-0741, Chen, Raymond, Mapp, Glenford E. ORCID: https://orcid.org/0000-0002-0539-5852, Slabbert, Louis, Aiash, Mahdi ORCID: https://orcid.org/0000-0002-3984-6244 and Lasebae, Aboubaker ORCID: https://orcid.org/0000-0003-2312-9694 (2012) M-Sieve: a visualisation tool for supporting network security analysts. In: VisWeek 2012, 14-19 Oct 2012, Seattle, WA, USA. . [Conference or Workshop Item]

[img]
Preview
PDF (Paper For VisWeek 2012 Proceedings) - Published version (with publisher's formatting)
Available under License Creative Commons Attribution-NoDerivatives.

Download (313kB) | Preview
[img]
Preview
PDF (Poster for VAST Challenge Poster Session) - UNSPECIFIED
Available under License Creative Commons Attribution-NoDerivatives.

Download (821kB) | Preview

Abstract

The Middlesex Spatial Interactive Visualisation Environment (M-Sieve) is a spatiotemporal visual analytics tool for exploring computer network activity. M-Sieve allows the user to filter and visualize data through facets to explore and find patterns. To help guide exploration, we developed a set of rules which are used to derive a variable we call the ‘Concern Level Assessment’ (CLA). The CLA is based on attributes of nodes on the network. The rules were developed by eliciting inferences from network security domain experts. The combination of M-Sieve and the CLA allowed us to address the problem presented by the VAST 2012 Competition - Mini Challenge 1.

Item Type: Conference or Workshop Item (Paper)
Research Areas: A. > School of Science and Technology
A. > School of Science and Technology > Computer Science
A. > School of Science and Technology > Computer Science > SensoLab group
A. > School of Science and Technology > Computer and Communications Engineering
Item ID: 9394
Useful Links:
Depositing User: Dr Sharmin Choudhury
Date Deposited: 25 Oct 2012 12:49
Last Modified: 17 Jun 2021 06:03
URI: https://eprints.mdx.ac.uk/id/eprint/9394

Actions (login required)

View Item View Item

Statistics

Downloads
Activity Overview
342Downloads
626Hits

Additional statistics are available via IRStats2.