Abstract
Intrusion detection (ID) analysts are charged with ensuring the safety and integrity of today's high-speed computer networks. Their work includes the complex task of searching for indications of attacks and misuse in vast amounts of network data. Although there are several information visualization tools to support ID, few are grounded in a thorough understanding of the work ID analysts perform or include any empirical evaluation. We present a user-centered visualization based on our understanding of the work of ID and the needs of analysts derived from the first significant user study of ID. The tool presents analysts with both 'at a glance' understanding of network activity, and low-level network link details. Results from preliminary usability testing show that users performed better and found easier those tasks dealing with network state in comparison to network link tasks.
| Original language | English (US) |
|---|---|
| Title of host publication | Conference on Human Factors in Computing Systems - Proceedings |
| Pages | 1403-1406 |
| Number of pages | 4 |
| DOIs | |
| State | Published - 2005 |
| Externally published | Yes |
| Event | Conference on Human Factors in Computing Systems, CHI EA 2005 - Portland, OR, United States Duration: Apr 2 2005 → Apr 7 2005 |
Other
| Other | Conference on Human Factors in Computing Systems, CHI EA 2005 |
|---|---|
| Country/Territory | United States |
| City | Portland, OR |
| Period | 4/2/05 → 4/7/05 |
Keywords
- Information visualization
- Intrusion detection
- Network security
- Usability testing
- User-centered design
ASJC Scopus subject areas
- Human-Computer Interaction
- Computer Graphics and Computer-Aided Design
- Software