Abstract:Data visualization is an important approach for data analysis, which can reveal the patterns and characteristics of complex datasets through visual processing, and provide aid for data analysts. In recent years, with the expansion of Internet users and the rich diversity of various Internet applications, the importance of network security is increasing. In the field of network security data analysis, it is a developing direction to use data visualization methods and visual analysis tools to assist manual analysis. In this paper, a visualization system for network security data is designed and implemented, which is mainly based on network flow records and security policies. The node centrality measurement and high-dimensional data visualization methods are comprehensively applied, and an interactive visualization approach is proposed. The IP topology is presented in three different view modes: static analysis, temporal analysis and exploration analysis. In addition, the high-dimensional projection map takes flow, security policy and IP address as analysis objects and selects several dimensional features as indicators. After visual presentation, the distribution of the stream set and IP set contained in the record after projection in the selected dimension space can be obtained, so that the analyst can find the points with significant abnormal eigenvalue distribution, and deduce the possible situation based on this. After testing, the system can accept the new original data record file, and quickly generate the corresponding visualization content, which can be used for the visualization analysis of network security optimization tool software, and has been used in the actual system.

Research On Visualization Systems For Ddos Attack Detection

Visualization Analysis and Design of DDoS Attack

Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN

TPDD: A Two-Phase DDoS Detection System in Software-Defined Networking

Overview of DDoS Attack Detection in Software-Defined Networks

DDoS Attack Detection Method Based on Network Abnormal Behavior in Big Data Environment

Detecting DDoS Attacks Based on Network Connection Statistics

DDoS Attack in Software Defined Networks: A Survey

Research on Distributed Denial-of-service Attacks:a Survey

System Detecting Network Anomaly with Visualization Techniques

An Interactive Visualization System for Network Security Data

DDoS Attack Defense in Big Data-oriented Urban Rail Transit Safety Evaluation System

A Network Visualization System for Anomaly Detection and Attack Tracing.

DDoS Attack Detection Based on Global Network Properties of Network Traffic Anomaly

A Comprehensive Survey on Ddos Defense Systems: New Trends and Challenges

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

Spatio-Temporal Graph Convolutional Networks for DDoS Attack Detecting.

A DDoS Attack Detection Method Based on SVM in Software Defined Network

A Comprehensive Survey of Distributed Denial of Service Detection and Mitigation Technologies in Software-Defined Network

Low-rate DDoS attacks detection method using data compression and behavior divergence measurement

A New Multistage Approach to Detect Subtle DDoS Attacks.