Abstract:Network security has become an area of significant importance more than ever as highlighted by the eye-opening numbers of data breaches, attacks on critical infrastructure, and malware/ransomware/cryptojacker attacks that are reported almost every day. Increasingly, we are relying on networked infrastructure and with the advent of IoT, billions of devices will be connected to the Internet, providing attackers with more opportunities to exploit. Traditional machine learning methods have been frequently used in the context of network security. However, such methods are more based on statistical features extracted from sources such as binaries, emails, and packet flows. On the other hand, recent years witnessed a phenomenal growth in computer vision mainly driven by the advances in the area of convolutional neural networks. At a glance, it is not trivial to see how computer vision methods are related to network security. Nonetheless, there is a significant amount of work that highlighted how methods from computer vision can be applied in network security for detecting attacks or building security solutions. In this paper, we provide a comprehensive survey of such work under three topics; i) phishing attempt detection, ii) malware detection, and iii) traffic anomaly detection. We also discuss existing research gaps and future research directions, especially focusing on how network security research community and the industry can leverage the exponential growth of computer vision methods to build much secure networked systems. Finally, we review a set of such commercial products for which public information is available and explore how computer vision methods are effectively used in those products and conclude with a brief overview of commonly used computer vision methods in this domain.

A survey of security visualization for computer network logs

An Interactive Visualization System for Network Security Data

System Detecting Network Anomaly with Visualization Techniques

A Survey of Network Anomaly Visualization

Research on Collaborative Visual Analysis of Large Scale Network Security Data

Research On Visualization Systems For Ddos Attack Detection

Study on Visualization Algorithm in Large-Scale Network Security Precaution

A Network Visualization System for Anomaly Detection and Attack Tracing.

System log clustering approaches for cyber security applications: A survey

Visualization of IDS Logs Based on Regular Polygon of Even Sides

Network security risk assessment and situation analysis

OCEANS: online collaborative explorative analysis on network security

On Vulnerability and Security Log analysis: A Systematic Literature Review on Recent Trends

Big-data Analysis of Multi-Source Logs for Anomaly Detection on Network-Based System.

A Review of Computer Vision Methods in Network Security

Visual Firewall Log Analysis -- At the Border Between Analytical and Appealing

Visualization Analysis and Design of DDoS Attack

Wavelet-based analysis of network security databases

A Survey of Network Security Situational Awareness Technology

Network Security Situation Awareness Based on Spatio-temporal Correlation of Alarms

Cyberattack detection model using deep learning in a network log system with data visualization