Survey on the visualization technologies of threatening security data in cyber space

Fan ZHANG; Fan XIE; Jie JIANG

doi:10.11959/j.issn.2096-109x.2018013

您当前的位置：

首页 >

文章列表页 >

Survey on the visualization technologies of threatening security data in cyber space

Security data visualization | 更新时间：2024-06-03

- Survey on the visualization technologies of threatening security data in cyber space
- Chinese Journal of Network and Information Security Vol. 4, Issue 2, Pages: 34-39(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018013
  CLC： TP393
- Online First：2018-02，
  
  Published：15 February 2018
- 稿件说明：
移动端阅览
Fan ZHANG, Fan XIE, Jie JIANG. Survey on the visualization technologies of threatening security data in cyber space[J]. Chinese Journal of Network and Information Security, 2018, 4(2): 34-39.
DOI：

Fan ZHANG, Fan XIE, Jie JIANG. Survey on the visualization technologies of threatening security data in cyber space[J]. Chinese Journal of Network and Information Security, 2018, 4(2): 34-39. DOI： 10.11959/j.issn.2096-109x.2018013.

摘要

在网络空间威胁手段日益复杂化的背景下，网络安全数据分析技术亟待提高。数据可视化技术已成为各类数据分析的理论框架和应用中的必备要素，并成为科学计算、商业智能、安全等领域中的普惠技术。网络威胁安全数据可视化通过提供有效的信息可视化交互手段，有效提升网络安全专家在分析网络空间安全问题过程中的认知能力。介绍了网络威胁安全数据可视化技术的研究现状和面临的问题，并对未来的发展趋势进行了展望。

Abstract

With the rapid development of the cyber threatening methods

the requirements of network security data analysis become more and more imperative.Data visualization has already evolved as a requisite tool among all kinds of data analysis theory framework and applications

especially in the fields of scientific computation

business intelligence and cyber security.Threatening security data visualization provides various effective interaction means which improve the perception ability for the cyber security specialists to get a distinctive insight into the large amount of complicated cyber security problems.The state-of-art cyber security data visualization technologies were introduced.Some existing problems that were still challenging research topics were investigated.Some directions for future studies were outlined.

关键词

Keywords

references

FISCHER F , FUCHS J , MANSMANN F , et al . BANKSAFE:visual analytics for big data in large-scale computer networks [J ] . Information Visualization , 2015 , 14 ( 1 ): 51 - 61 .

张焕国 , 韩文报 , 来学嘉 , 等 . 网络空间安全综述 [J ] . 中国科学:信息科学 , 2016 , 46 ( 2 ): 125 - 164 .

ZHANG H G , HAN W B , LAI X J , et al . Survey on cyberspace security [J ] . SCIENTIA SINICA Information is , 2016 , 46 ( 2 ): 125 - 164 .

SHIRAVI H , SHIRAVI A , GHORBANI A A . A survey of visualization systems for network security [J ] . IEEE Transactions on Visualization and Computer Graphics , 2012 , 18 ( 8 ): 1313 - 1329 .

ZHANG T Y , WANG X M , LI Z Z , et al . A survey of network anomaly visualization [J ] . Science China:Information Sciences , 2016 , 59 ( 1 ): 1 - 17 .

STAHELI D , YU T , JORDAN C R , et al . Visualization evaluation for cyber security:trends and future directions [C ] // IEEE Workshop on Visualization for Computer Security (VizSec) . 2014 .

POST T , WISCHGOLL T , BRYANT A R , et al . Visually guided flow tracking in software-defined networking [C ] // IEEE Workshop on Visualization for Computer Security(VizSec) . 2016 .

WARD M O , GRINSTEIN G , KEIM D . Interactive data visualization:foundations,techniques,and applications [M ] . A K Peters Press , 2010 .

陈为 , 沈则潜 , 陶煜波 . 数据可视化 [M ] . 北京 : 电子工业出版社 , 2013 .

CHEN W , SHEN Z Q , TAO Y B . Data visualization [M ] . Beijing : Publishing House of Electronics Industry , 2013 .

李建华 . 网络空间威胁情报感知、共享与分析技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 2 ): 16 - 29 .

LI J H . Overview of the technologies of threat intelligence sensing,sharing and analysis in cyber space [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 2 ): 16 - 29 .

李燕 , 曹宝香 , 马兆丰 , 等 . 关联分析算法在安全管理平台中的研究与应用 [J ] . 计算机技术与发展 , 2013 , 23 ( 10 ): 107 - 110 , 114 .

LI Y , CAO B X , MA Z F , et al . Research and application of correlation analysis in security management platform [J ] . Computer Technology and Development , 2013 , 23 ( 10 ): 107 - 110 , 114 .

赵颖 , 樊晓平 , 周芳芳 , 等 . 网络安全数据可视化综述 [J ] . 计算机辅助设计与图形学学报 , 2014 , 26 ( 5 ): 687 - 697 .

ZHAO Y , FAN X P , ZHOU F F , et al . A survey on network security data visualization [J ] . Journal of Computer-Aided Design ＆ Computer Graphics , 2014 , 26 ( 5 ): 687 - 697 .

赵颖 , 樊晓平 , 周芳芳 , 等 . 大规模网络安全数据协同可视分析方法研究 [J ] . 计算机科学与探索 , 2014 , 8 ( 7 ): 848 - 857 .

ZHAO Y , FAN X P , ZHOU F F , et al . Research on collaborative visual analysis of large scale network security data [J ] . Journal of Frontiers of Computer Science and Technology , 2014 , 8 ( 7 ): 848 - 857 .

赵颖 , 樊晓平 , 周芳芳 , 等 . 多源网络安全数据时序可视分析方法研究 [J ] . 小型微型计算机系统 , 2014 , 35 ( 4 ): 906 - 910 .

ZHAO Y , FAN X P , ZHOU F F , et al . Visualization of multi-source network security data based on stacked stream graph [J ] . Journal of Chinese Computer Systems , 2014 , 35 ( 4 ): 906 - 910 .

张胜 , 施荣华 , 赵颖 . 基于多元异构网络安全数据可视化融合分析方法 [J ] . 计算机应用 , 2015 , 35 ( 5 ): 1379 - 1384 , 1416 .

ZHANG S , SHI R H , ZHAO Y . Visual fusion and analysis for multivariate heterogeneous network security data [J ] . Journal of Computer Applications , 2014 , 35 ( 4 ): 1379 - 1384 , 1416 .

赵立军 , 张健 . 基于堆叠条形图和平行坐标的网络数据安全可视化分析方法研究 [J ] . 装备学院学报 , 2015 , 26 ( 5 ): 86 - 90 .

ZHAO L J , ZHANG J . Study on network data security visualization based on stacked bar chart and parallel coordinates [J ] . Journal of Equipment Academy , 2015 , 26 ( 5 ): 86 - 90 .

吴亚东 , 蒋宏宇 , 赵思蕊 , 等 . 网络安全数据3D可视化方法 [J ] . 电子科技大学学报 , 2015 , 44 ( 4 ): 594 - 598 .

WU Y D , JIANG H Y , ZHAO S R , et al . 3D visualization method for network security data [J ] . Journal of University of Electronic Science and Technology of China , 2015 , 44 ( 4 ): 594 - 598 .

BECKER R A , EICK S G , WILKS A R . Visualizing network data [J ] . IEEE Transactions on Visualization and Computer Graphics , 1995 , 1 ( 1 ): 16 - 28 .

MCPHERSON J , MA K , KRYSTOSK P , et al . PortVis:a tool for port-based detection of security events [C ] // IEEE Symposium on Visualization for Cyber Security(VizSec) . 2004 .

LAKKARAJU K , YURCIK W , BEARAVOLU R , et al . NVisionIP:an interactive network flow visualization tool for security [C ] // IEEE International Conference on Systems,Man and Cybernetics , 2004 .

GOODALL J R , LUTTERS W G , RHEINGANS P , et al . Preserving the big picture:visual network traffic analysis with TNV [C ] // IEEE Workshop on Visualization for Computer Security(VizSec) . 2005 .

CONTI G , ABDULLAH K , GRIZZARD J , et al . Countering security analyst and network administrator overload through alert and packet visualization [J ] . IEEE Computer Graphics and Applications , 2006 , 26 ( 2 ): 60 - 70 .

NYARKO K , CAPERS T , SCOTT C , et al . Network intrusion visualization with NIVA,an intrusion detection visual analyzer with paptic integration [C ] // The 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems . 2002 .

LIVNAT Y , AGUTTER J , MOON S , et al . A visualization paradigm for network intrusion detection [C ] // IEEE SMC Information Assurance Workshop . 2005 .

ABDULLAH K , LEE C , CONTI G , et al . IDS RainStorm:visualizing IDS alarms [C ] // IEEE Workshop on Visualization for Computer Security(VizSec) . 2005 .

BERTINI E , HERTZOG P , LALANNE D . SpiralView:towards security policies assessment through visual correlation of network resources with evolution of alarms [C ] // IEEE Conference on Visual Analytics Science and Technology (VAST’07) . 2007 .

SIADATI H , SAKET B , MEMON N . Detecting malicious logins in enterprise networks using visualization [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2016 .

SYAMKUMAR M , DURAIRAJAN R , BARFORD P . Bigfoot:a geo-based visualization methodology for detecting BGP threats [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2016 .

LING X , GERTH J , HANRAHAN P . Enhancing visual analysis of network traffic using a knowledge representation [C ] // IEEE Symposium on Visual Analytics Science and Technology . 2006 .

SHEN Z Q , MA K L , ELIASSI-RAD T . Visual analysis of large heterogeneous social networks by semantic and structural abstraction [J ] . IEEE Transactions on Visualization and Computer Graphics , 2006 , 12 ( 6 ): 1427 - 1439 .

IANNACONE M , BOHN S , NAKAMURA G , et al . Developing an ontology for cyber security knowledge graphs [C ] // The Cyber and Information Security Research . 2015 .

AUPETIT M , ZHAUNIAROVICH Y , VASILIADISM G , et al . Visualization of actionable knowledge to mitigate DRDoS attacks [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2016 .

YAO Y G , WANG X , MENG X J , et al . ISEK:an information security knowledge graph for CISP knowledge system [C ] // The International Conference on IT Convergence and Security (ICITCS) . 2015 .

YAO Y G , ZHANG L , YI J , et al . A framework for big data security analysis and the semantic technology [C ] // The International Conference on IT Convergence and Security (ICITCS) . 2016 .

CIAPESSONI E , CIRIO D , KJØLLE G , et al . Probabilistic risk-based security assessment of Power systems considering incumbent threats and uncertainties [J ] . IEEE Transactions on Smart Grid , 2016 , 7 ( 6 ): 2890 - 2903 .

彭勇 , 江常青 , 谢丰 , 等 . 工业控制系统信息安全研究进展 [J ] . 清华大学学报 , 2012 , 52 ( 10 ): 1396 - 1408 .

PONG Y , JIANG C Q , XIE F , et al . Industrial control system cyber security research [J ] . Journal of Tsinghua University , 2012 , 52 ( 10 ): 1396 - 1408 .

KAYNAR K , SIVRIKAYA F . Distributed attack graph generation [J ] . IEEE Transactions on Dependable and Secure Computing , 2016 , 13 ( 5 ): 519 - 532 .

YELIZAROV A , GAMAYUNOV D . Visualization of complex attacks and state of attacked network [C ] // IEEE Workshop on Visualization for Computer Security (VizSec) . 2009 .

WANG T B , XIA C H , WEN S , et al . SADI:A novel model to study the propagation of social worms in hierarchical networks [J ] . IEEE Transactions on Dependable and Secure Computing , 2015 , 99 : 1 - 17 .

STANGE J , DÖRK M , LANDSTORFER J , et al . Visual filter:graphical exploration of network security log files [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2014 .

ZHAO Y , LIANG X , FAN X P , et al . MVSec:multi-perspective and deductive visual analytics on heterogeneous network security data [J ] . Journal of Visualization , 2014 , 17 ( 3 ): 181 - 196 .

赵颖 , 王权 , 黄叶子 , 等 . 多视图合作的网络流量时序数据可视分析 [J ] . 软件学报 , 2016 , 27 ( 5 ): 1188 - 1198 .

ZHAO Y , WANG Q , HUANG Y Z , et al . Collaborative visual analytics for network traffic time-series data with multiple views [J ] . Journal of Software , 2016 , 27 ( 5 ): 1188 - 1198 .

ZHOU F F , HUANG W , ZHAO Y , et al . ENTVis:a visual analytic tool for entropy-based network traffic anomaly detection [J ] . IEEE Computer Graphics and Applications , 2015 , 35 ( 6 ): 42 - 50 .

SHI L , WANG C , WEN Z , et al . 1.5D Egocentric dynamic network visualization [J ] . IEEE Transactions on Visualization and Computer Graphics , 2015 , 21 ( 5 ): 624 - 637 .

LANEY D . Information economics,big data and the art of the possible with analytics [EB/OL ] . https://www-950.ibm.com/events/wwe/grp/grp037.nsf/vLookupPDFs/Gartner_Doug-%20Analytics/$file/Gartner_Doug-%20Analytics.pdf https://www-950.ibm.com/events/wwe/grp/grp037.nsf/vLookupPDFs/Gartner_Doug-%20Analytics/$file/Gartner_Doug-%20Analytics.pdf .

CORREA C D , CRNOVRSANIN T , MA K . Visual reasoning about social networks using centrality sensitivity [J ] . IEEE Transactions on Visualization and Computer Graphics , 2012 , 18 ( 1 ): 106 - 120 .

ARIETTA S M , EFROS A A , RAMAMOORTHI R , et al . City forensics:using visual elements to predict non-visual city attributes [J ] . IEEE Transactions on Visualization and Computer Graphics , 2016 , 20 ( 12 ): 2624 - 2633 .

WANG F , CHEN W , WU F R , et al . A visual reasoning approach for data-driven transport assessment on urban roads [C ] // IEEE Conference on Visual Analytics Science and Technology (VAST) . 2014 .

CAO N , SHI C L , LIN S , et al . TargetVue:visual analysis of anomalous user behaviors in online communication systems [J ] . IEEE Transactions on Visualization and Computer Graphics , 2016 , 22 ( 1 ): 280 - 289 .

SAKET B , KIM H , BROWN E T , et al . Visualization by demonstration:an interaction paradigm for visual data exploration [J ] . IEEE Transactions on Visualization and Computer Graphics , 2017 , 23 ( 1 ): 331 - 340 .

Views

5880

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Overview of the technologies of threat intelligence sensing,sharing and analysis in cyber space

AI-based risk assessment and early warning method for futures trading

Technology and practice of intelligent governance for financial data security

Adaptive selection method of desensitization algorithm based on privacy risk assessment

Preliminary study on the reform of machine learning teaching

Related Author

Jian-hua LI

Li Meng

Chang Fei

Wang Junjie

Hu Yi

Qiao Yan

Weng Zhenhao

Guo Jinsheng

Related Institution

上海交通大学信息安全工程学院

Huishang Futures Co., Ltd.

School of Computer Science and Information Engineering, Hefei University of Technology

Key Laboratory of Knowledge Engineering with Big Data, Hefei University of Technology

School of Computer Science, Fudan University

⁰