Visual Behavior Characterization for Intrusion Detection in Large Scale Systems

This work focuses on the visual representation of relations towards aiding the exploration and analysis of network intrusions. Fundamentally, the visual representations aid an analyst in comprehending the activity of individuals incorporated within the data set. Their actions are represented visually using a node and link metaphor. The visualization aids the analyst in identifying the complex interactions intrinsic to identifying the overall goal of an individual, i.e., the individuals true behavior. Such analyses are becoming critical with the continuing growth of the Internet and the corresponding growth of hackers and attempted intrusions. This is complicated by the fact that hackers, in general, will attempt to hide their activities from analysis; thus increasing the complexity of the analysis needed to identify their actions, particularly when a successful intrusion has occurred. Key Words: Information Visualization, Intrusion Detection, Computer Security

• Type: Conference
• Year: 2001
• Where: VIIP
• Authors: Robert F. Erbacher
• Keywords: Image Processing, Individuals True Behavior, Network Intrusions, VIIP 2001, Visual Representations