ENAVis: Enterprise Network Activities Visualization

Abstract-- With the prevalence of multi-user environments, it has become an increasingly challenging task to precisely identify who is doing what on an enterprise network. Current management systems that rely on inferring user identity and application usage via log files from routers and switches are not capable or accurately reporting and managing a large-scale network due to the coarseness of the collected data. We propose a system that utilizes finer-grained data in the form of local context, i.e. the precise user and application associated with a network connection. Through the dynamic correlation and graph modeling, we developed a visualization tool called ENAVis (Enterprise Network Activities Visualization). ENAVis aids an real-world administrator in allowing them to more efficiently manage and gain insight into connectivity among, hosts, users, and applications that is otherwise obfuscated, lost or not collected in systems currently deployed in an enterprise setting.

• Type: Conference
• Year: 2008
• Where: LISA
• Authors: Qi Liao, Andrew Blaich, Aaron Striegel, Douglas Thain
• Keywords: Challenging Task, Current Management Systems, Enterprise Network, LISA 2008, Operating System