Effective Visualization of File System Access-Control

Heitzmann, Alexander; Palazzi, Bernardo; Papamanthou, Charalampos; Tamassia, Roberto

doi:10.1007/978-3-540-85933-8_2

Cited by 15 publications

(8 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Disk and file systems analysis can be performed in several layers [7]. Approaches addressing specific features are, for example, Change-link 2.0 [18], which provides several visualizations to capture changes to files and directories over time, or the work of Heitzmann et al [13], who proposed a visual representation of access control permissions in a standard hierarchical file system using treemaps.…”

Section: Related Workmentioning

confidence: 99%

Exploratory Analysis of File System Metadata for Rapid Investigation of Security Incidents

Beran,

Hrdina,

Kouril

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

Section: Related Workmentioning

confidence: 99%

Exploratory Analysis of File System Metadata for Rapid Investigation of Security Incidents

Beran,

Hrdina,

Kouril

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

“…Because there are many rules governing the final permission of the shared files or folders, the interface to configure permission is rather complicated. To make the file sharing task simple and secure at the same time, Heitzmann et al developed a visually secure interface for NTFS file system [10]. This interface uses Treemap [11] to display hierarchical folder structure with different colors for different permission levels.…”

Section: Security Visualizationmentioning

confidence: 99%

Interactive Visual Decision Tree for Developing Detection Rules of Attacks on Web Applications

Dang¹,

Khanh²,

Nguyen³

2018

ijacsa

View full text Add to dashboard Cite

Creating detection rules of attacks on web applications is not a trivial task, especially when the attacks are launched by experienced hackers. In such a situation, human expertise is essential to produce effective results. However, human users are easily overloaded by the huge input data, which is meant to be analyzed, learned from, and used to develop appropriate detection rules. To support human users in dealing with the information overload problem while developing detection rules of web application attacks, we propose a novel technique and tool called Interactive Visual Decision Tree (IVDT). IVDT is a variant of the popular decision tree learning technique introduced in research fields such as machine learning and data mining, with two additionally important features: visually supported data analysis and user-guided tree growing. Visually supported data analysis helps human users cope with high volume of training data while analyzing each node in the tree being built. On the other hand, user-guided tree growing allows human users to apply their own expertise and experience to create custom split condition for each tree node. A prototype implementation of IVDT is built and experimented to evaluate its effectiveness in terms of detection accuracy achieved by its users as well as ease of working with. The experiment results prove some advantages of IVDT over traditional decision tree learning method, but also point out its problems that should be handled in future improvements.

show abstract

“…Vaniea et al developed visualization tool for security professionals that visualizes the output of policy analysis and shows the effect of the policy changes [26]. Heitzmann et al developed treemap-based visualization of access control for the NTFS file system that can help a non-expert user understand and manipulate file system permissions in a simple and effective way [16]. Ueno et al developed an access control interface, namely Soramame [25], that extracts and visualizes the data-flows of access control policies and uses animation to help users better understand the policies.…”

Section: Related Workmentioning

confidence: 99%

A visualization tool for evaluating access control policies in facebook-style social network systems

Anwar

Fong

2012

Proceedings of the 27th Annual ACM Symposium on Applied Computing

View full text Add to dashboard Cite

Understanding the privacy implication of adopting a certain privacy setting is a complex task for the users of social network systems. Users need tool support to articulate potential access scenarios and perform policy analysis. Such a need is particularly acute for Facebook-style Social Network Systems (FSNSs), in which semantically rich topology-based policies are used for access control. In this work, we develop a prototypical tool for Reflective Policy Assessment (RPA) -a process in which a user examines her profile from the viewpoint of another user in her extended neighbourhood in the social graph. We verify the utility and usability of our tool in a within-subject user study.

show abstract

Effective Visualization of File System Access-Control

Cited by 15 publications

References 11 publications

Exploratory Analysis of File System Metadata for Rapid Investigation of Security Incidents

Exploratory Analysis of File System Metadata for Rapid Investigation of Security Incidents

Interactive Visual Decision Tree for Developing Detection Rules of Attacks on Web Applications

A visualization tool for evaluating access control policies in facebook-style social network systems

Contact Info

Product

Resources

About