Abstract:Network security has become an area of significant importance more than ever as highlighted by the eye-opening numbers of data breaches, attacks on critical infrastructure, and malware/ransomware/cryptojacker attacks that are reported almost every day. Increasingly, we are relying on networked infrastructure and with the advent of IoT, billions of devices will be connected to the Internet, providing attackers with more opportunities to exploit. Traditional machine learning methods have been frequently used in the context of network security. However, such methods are more based on statistical features extracted from sources such as binaries, emails, and packet flows. On the other hand, recent years witnessed a phenomenal growth in computer vision mainly driven by the advances in the area of convolutional neural networks. At a glance, it is not trivial to see how computer vision methods are related to network security. Nonetheless, there is a significant amount of work that highlighted how methods from computer vision can be applied in network security for detecting attacks or building security solutions. In this paper, we provide a comprehensive survey of such work under three topics; i) phishing attempt detection, ii) malware detection, and iii) traffic anomaly detection. We also discuss existing research gaps and future research directions, especially focusing on how network security research community and the industry can leverage the exponential growth of computer vision methods to build much secure networked systems. Finally, we review a set of such commercial products for which public information is available and explore how computer vision methods are effectively used in those products and conclude with a brief overview of commonly used computer vision methods in this domain.

Survey of Network Security Visualization Techniques

A survey of security visualization for computer network logs

System Detecting Network Anomaly with Visualization Techniques

Study on Visualization Algorithm in Large-Scale Network Security Precaution

An Interactive Visualization System for Network Security Data

A Survey of Network Anomaly Visualization

A Network Visualization System for Anomaly Detection and Attack Tracing.

Research On Visualization Systems For Ddos Attack Detection

Survey of Technology in Network Security Situation Awareness

Research on Collaborative Visual Analysis of Large Scale Network Security Data

A Survey of Network Security Situational Awareness Technology

Network security risk assessment and situation analysis

A real-time network security visualization system based on incremental learning (ChinaVis 2018)

A Review of Computer Vision Methods in Network Security

Research of Security Analysis and Audit Technique Based on Network Content

A topology visualization early warning distribution algorithm for large-scale network security incidents.

Research on Network Security Assessment

Technical Research on Computer Network Security Automatic Evaluation

Computer Network Security System Research

Study on the method to generate network attack graphs

Network security analysis using information fusion