Network intrusion visualization with NIVA, an intrusion detection visual analyzer with haptic integration

Abstract

The explosive growth of malicious activities on worldwide communication networks, such as the Internet, has highlighted the need for efficient intrusion detection systems. The efficiency of traditional intrusion detection systems is limited by their inability to effectively relay relevant information due to their lack of interactive/immersive technologies. In this paper, we explore several network visualization techniques geared towards intrusion detection on small and large-scale networks. We also examine the use of haptics in network intrusion visualization. By incorporating concepts from electromagnetics, fluid dynamics, and gravitational theory, we show that haptic technologies can provide another dimension of information critical to the efficient visualization of network intrusion data. Furthermore, we explore the applicability of these visualization techniques in conjunction with commercial network intrusion detectors. Finally, we present a network intrusion visualization application with haptic integration, NIVA, which allows the analyst to interactively investigate as well as efficiently detect structured attacks across time and space using advanced interactive three-dimensional displays.

Neural visualization of network traffic data for intrusion detection

“…Most of the solutions described in this section use a glyph metaphor [28,38,46] to encode information by changing different features (colour, size, opacity, etc.) in addition to the spatial coordinates, while others use traditional representation techniques such as histograms [25,47,48], histographs [39] or other graphs [29,32].…”

“…The Time-based Network Traffic Visualizer [31] combines a matrix display of host IP address and packets timestamp. IP segments are used in NIVA [38] to locate and colour the data.…”

MOVIH-IDS: A mobile-visualization hybrid intrusion detection system

“…Various visualization techniques have been also applied in the field of IDSs [2], [31], [42] , [52], [53], [56] to tackle this issue by providing a visual depiction of the network topology, ID logs, network statistics or some other info. The proposed model goes further and offers a complete and more intuitive visualization of network traffic by depicting each simple packet and providing the network administrator with a snapshot of network traffic and protocol interactions to identify anomalous situations.…”

Intrusion Detection System Visualization of Network Alerts

“…2002]. Drill-down techniques are often useful to obtain details about particular items -these are the details on demand [Marty, 2009& Nyarko et al, 2002.…”

“…Visualization leverages the innate human capability for pattern recognition to increase the effectiveness, understanding, and speed of response to network security threats. "Visualization is a powerful link between the two most dominant information-processing systems, the human mind and the modern computer" [Nyarko, et al, 2002].…”