eCite Digital Repository

NetflowVis: a temporal visualization system for netflow logs analysis

Citation

He, L and Tang, B and Zhu, M and Lu, B and Huang, W, NetflowVis: a temporal visualization system for netflow logs analysis, Proceedings of the 13th International Conference on Cooperative Design, Visualization, and Engineering (CDVE 2016), 24-27 October 2016, Sydney, Australia, pp. 202-209. ISBN 978-3-319-46770-2 (2016) [Refereed Conference Paper]


Preview
PDF
2Mb
  

Copyright Statement

Copyright 2016 Springer International Publishing

DOI: doi:10.1007/978-3-319-46771-9_27

Abstract

Netflow logs record the interactions between host pairs on both sides of the monitored border, and have got more attention from researchers for security concerns. Such data allows analysts to find interesting patterns and security anomalies. Visual analytics provides interaction and visualization techniques that can support these tasks. In this paper, we present a system called NetflowVis to analyze communication patterns and network abnormalities from netflow logs. This system consists of four views, including the communication trajectories view, the traffic line view, the snapshot view and the protocol view. The communication trajectories view is a composite view that dynamically describes the communication trajectories. This view combines a link-node tree and an improved ThemeRiver. The protocol view is designed to display statistical data of the upstream and downstream traffic on different protocols, which is an improved radial view based on an area filling strategy. The system provides a multilevel analysis architecture for netflow cognition. In this paper, we also present a case study to demonstrate the effectiveness and usefulness of our system.

Item Details

Item Type:Refereed Conference Paper
Keywords:information visualization, network security visualization, netflow logs, temporal visualization, traffic trajectory
Research Division:Information and Computing Sciences
Research Group:Information Systems
Research Field:Computer-Human Interaction
Objective Division:Expanding Knowledge
Objective Group:Expanding Knowledge
Objective Field:Expanding Knowledge in the Information and Computing Sciences
Author:Huang, W (Dr Tony Huang)
ID Code:112917
Year Published:2016
Deposited By:Computing and Information Systems
Deposited On:2016-12-04
Last Modified:2017-11-20
Downloads:30 View Download Statistics

Repository Staff Only: item control page