Abstract:Security analysis should take advantage of a reliable knowledge base that contains semantically-rich information about a protected network. This knowledge is provided by network mapping tools. These tools rely on models to represent the entities of interest, and they, leverage off network discover), techniques to populate the model structure with the data that is pertinent to a specific target network. Unfortunately, existing tools rely on incomplete data models. Networks are complex systems and most approaches oversimplify their target models in an effort to limit the problem space. In addition, the techniques used to populate the models are limited in scope and are difficult to extend.This paper presents NetMap, a security tool for network modeling, discovery, and analysis. NetMap relies on a comprehensive network model that is not limited to a specific network level; it integrates network information throughout the layers. The model contains information about topology, infrastructure, and deployed services. In addition, the relationships among different entities in different layers of the model are made explicit. The modeled information is managed by using a suite of composable network tools that can determine various aspects of network configurations through scanning techniques and heuristics. Tools in the suite are responsible for a single, well-defined task. Each tool has an abstract specification of the input, the output, the type of processing, and the requirements for carrying out a task. Tool descriptions are expressed in a Network Tool Language. The tool descriptions are then stored in a database. By using the network model and the tool descriptions, NetMap is able to automatically determine which tools are needed to perform a particular complex task and how the tools should be scheduled to obtain the requested results.

Netvis: A Network Security Management Visualization Tool Based on Treemap

System Detecting Network Anomaly with Visualization Techniques

An Interactive Visualization System for Network Security Data

A Network Visualization System for Anomaly Detection and Attack Tracing.

TrustVis: Visualizing Trust Toward Attack Identification in Distributed Computing Environments

Study on Visualization Algorithm in Large-Scale Network Security Precaution

Research and Implementation on Network Topology Visualization Tool

Network View and Cognitive Mechanism for Virtual Network Resource Management Based Intelligent

A real-time network security visualization system based on incremental learning (ChinaVis 2018)

A Survey of Network Anomaly Visualization

Visualizing graph dynamics and similarity for enterprise network security and management

Composable Tools For Network Discovery And Security Analysis

The Visualization Algorithm Based on Multi-Level and Multi-Granular Hybrid Layout and Its Applications

NetView: Towards on-demand network-wide telemetry in the data center

Scalable Network Traffic Visualization Using Compressed Graphs.

Modeling of Network Situation Awareness

Network Explorer

Multilevel Visual Analysis of Aggregate Geo-Networks.

Demo: NetVision: Efficient Visualization Front-End for Packet-level Discrete-Event Network Simulation

Visualizing Air Traffic Flow Management Alert Information Using Squarified Treemaps

A survey of security visualization for computer network logs