Visualization for Computer Security: 5th International Workshop, Vizsec 2008, Cambridge, Ma, Usa, September 15, 2008, Proceedings

ISBN-13: 9783540859314 / Angielski / Miękka / 2008 / 210 str.

John R. Goodall

Opis

This volumecontains the paperspresented at VizSec 2008, the 5th International Workshop on Visualization for Cyber Security, held on September 15, 2008 in Cambridge, Massachusetts, USA. VizSec 2008 was held in conjunction with the 11thInternationalSymposiumonRecentAdvancesinIntrusionDetection(RAID). There were 27 submissions to the long and short paper categories. Each submission was reviewed by at least 2 reviewers and, on average, 2.9 program committee members. The program committee decided to accept 18 papers. The program also included an invited talk and a panel. The keynote address was given by Ben Shneiderman, University of Maryland at College Park, on the topic InformationForensics: HarnessingVisualizationto SupportDiscovery.The panel, on the topic The Need for Applied Visualization in Information Security Today, wasorganizedandmoderatedbyTobyKohlenbergfromIntelCorporation. July 2008 John R. Goodall Conference Organization Program Chairs John R. Goodall Secure Decisions division of Applied Visions Gregory Conti United States Military Academy Kwan-Liu Ma University of California at Davis Program Committee Stefan Axelsson Blekinge Institute of Technology Richard Bejtlich General Electric Kris Cook Paci?c Northwest National Laboratory David Ebert Purdue University Robert Erbacher Utah State University Deborah Frincke Paci?c Northwest National Laboratory Carrie Gates CA Labs John Gerth Stanford University Barry Irwin Rhodes University Daniel Keim University of Konstanz Toby Kohlenberg Intel Corporation Stuart Kurkowski Air Force Institute of Technology Kiran Lakkaraju University of Illinois at Urbana-Champaign Ra?ael Marty Splunk Douglas Maughan Department of Homeland Security John McHugh Dalhousie University Penny Rheingans UMBC Lawrence Rosenblum National Science Foundation George Tadda Air Force Research Lab Daniel Tesone Applied Visions Alfonso Valdes SRI International

Spis treści

Visual Reverse Engineering of Binary and Data Files.- Effective Visualization of File System Access-Control.- Visual Analysis of Program Flow Data with Data Propagation.- A Term Distribution Visualization Approach to Digital Forensic String Search.- GARNET: A Graphical Attack Graph and Reachability Network Evaluation Tool.- A Graph-Theoretic Visualization Approach to Network Risk Analysis.- Improving Attack Graph Visualization through Data Reduction and Attack Grouping.- Show Me How You See: Lessons from Studying Computer Forensics Experts for Visualization.- A Task Centered Framework for Computer Security Data Visualization.- BGPeep: An IP-Space Centered View for Internet Routing Data.- Large-Scale Network Monitoring for Visual Analysis of Attacks.- Visualizing Real-Time Network Resource Usage.- Wireless Cyber Assets Discovery Visualization.- NetFlow Data Visualization Based on Graphs.- Backhoe, a Packet Trace and Log Browser.- Existence Plots: A Low-Resolution Time Series for Port Behavior Analysis.- Using Time Series 3D AlertGraph and False Alert Classification to Analyse Snort Alerts.- Network Traffic Exploration Application: A Tool to Assess, Visualize, and Analyze Network Security Events.

Blurb

This book constitutes the refereed proceedings of the 5th International Workshop on Visualization for Cyber Security held on September 15, 2008, in Cambridge, Massachusetts, USA, in conjunction with the 11th International Symposium on Recent Advances in Intrusion Detection (RAID).

The 18 papers presented in this volume were carefully reviewed and selected from 27 submissions. VizSec research has focused on helping human analysts to detect anomalies and patterns, particularly in computer network defense. This year's paper focus on bridging the gap between visualization and automation.