Personal tools
You are here: Home pubs VizSEC 2005 Proceedings Visual exploration of malicious network objects using semantic zoom, interactive encoding and dynamic queries
Document Actions

G Conti, J Grizzard, Ahamad Mustaque, and H Owen (2005)

Visual exploration of malicious network objects using semantic zoom, interactive encoding and dynamic queries

In: VizSEC: Proceedings of the IEEE Workshop on Visualization for Computer Security, pages 83–90.

This paper explores the application of visualization techniques to aid in the analysis of malicious and non-malicious binary objects. These objects may include any logically distinct chunks of binary data such as image files, word processing documents and network packets. To facilitate this analysis, we present a novel visualization technique for comparing and navigating among 600-1000+ such objects at one time. While the visualization technique alone has powerful application for both directed and undirected exploration of many classes of binary objects, we chose to study network packets. To increase effectiveness, we strengthened the visualization technique with novel, domain-specific semantic zooming, interactive encoding and dynamic querying capabilities. We present results and lessons learned from implementing these techniques and from studying both malicious and non-malicious network packets. Our results indicate that the information visualization system we present is an efficient and effective way to compare large numbers of network packets, visually examine their payloads and navigate to areas of interest within large network datasets.
 
by John Goodall last modified 2008-01-29 10:45
Log in


Forgot your password?
New user?
related from amazon
Navigation
 
Sponsored by

google search
Google
advertisements
 

Powered by Plone CMS, the Open Source Content Management System

This site conforms to the following standards: