Abstract:Data visualization is an important approach for data analysis, which can reveal the patterns and characteristics of complex datasets through visual processing, and provide aid for data analysts. In recent years, with the expansion of Internet users and the rich diversity of various Internet applications, the importance of network security is increasing. In the field of network security data analysis, it is a developing direction to use data visualization methods and visual analysis tools to assist manual analysis. In this paper, a visualization system for network security data is designed and implemented, which is mainly based on network flow records and security policies. The node centrality measurement and high-dimensional data visualization methods are comprehensively applied, and an interactive visualization approach is proposed. The IP topology is presented in three different view modes: static analysis, temporal analysis and exploration analysis. In addition, the high-dimensional projection map takes flow, security policy and IP address as analysis objects and selects several dimensional features as indicators. After visual presentation, the distribution of the stream set and IP set contained in the record after projection in the selected dimension space can be obtained, so that the analyst can find the points with significant abnormal eigenvalue distribution, and deduce the possible situation based on this. After testing, the system can accept the new original data record file, and quickly generate the corresponding visualization content, which can be used for the visualization analysis of network security optimization tool software, and has been used in the actual system.

VAST 2013 mini challenge 3: AnNetTe collaboration oriented visualization of network data

3D anomaly bar visualization for large-scale network: VAST 2012 Mini Challenge #1

TieVis: visual analytics of evolution of interpersonal ties

A Collaborative Visual Analysis System for Communication Pattern Discovery

A Network Visualization System for Anomaly Detection and Attack Tracing.

NetSecRadar: A real-time visualization system for network security: VAST 2012 Mini Challenge. Award: Honorable mention for interesting use of radial visualization technique

Applying Advanced Analytic Techniques to Visually Explore Communication Patterns in Mobile Data.

Visual Analysis for Subgroups in a Dynamic Network

Bridging the Gap of Network Management and Anomaly Detection through Interactive Visualization

PCNET: Exploratory Visual Analysis of Large-Scale Network

VAST 2014 Mini-Challenge 1: MEAT - Multiview Event Analysis Tool of Diverse Data Sources

VisWorks text and network visual analytics: VAST 2010 Mini Challenge 1 award: “Effective interactive visualization of document contents”

Research on Collaborative Visual Analysis of Large Scale Network Security Data

An Interactive Visualization System for Network Security Data

Netsecradar: A Real-Time Visualization System For Network Security

Investigating Network Traffic Through Compressed Graph Visualization: VAST 2012 Mini Challenge 2 Award: &#x201c;good Adaptation of Graph Analysis Techniques&#x201d;

CA2: Cyber Attacks Analytics

NetSecRadar: A Visualization System for Network Security Situational Awareness

Inet: Visual Analysis of Irregular Transition in Multivariate Dynamic Networks

Interactive and Collaborative Visual Analysis on Traffic Sensor Data.

Visual Bird Watcher: Interactive Visual Analysis on Bird Distribution and Migration