网络威胁安全数据可视化综述

张繁; 谢凡; 江颉

doi:10.11959/j.issn.2096-109x.2018013

您当前的位置：

首页 >

文章列表页 >

网络威胁安全数据可视化综述

安全数据可视化 | 更新时间：2024-06-03

- 网络威胁安全数据可视化综述
- Survey on the visualization technologies of threatening security data in cyber space
- 网络与信息安全学报 2018年4卷第2期页码：34-39
- 作者机构：
- 作者简介：
  
  [ "张繁（1978-），男，浙江绍兴人，博士，浙江工业大学副教授，主要研究方向为网络安全、信息可视化。" ]
  [ "谢凡（1997-），男，广东梅州人，浙江工业大学本科生，主要研究方向为网络安全、数据挖掘。" ]
  [ "江颉（1972-），女，浙江平湖人，博士，浙江工业大学计副教授，主要研究方向为信息安全、服务计算。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(U1736109);国家自然科学基金资助项目;The National Natural Science Foundation of China(61772456);国家自然科学基金资助项目;The National Natural Science Foundation of China(U1609217);浙江省自然科学基金资助项目(LY18F020034)
- DOI：10.11959/j.issn.2096-109x.2018013
  中图分类号： TP393
- 网络首发：2018-02，
  
  纸质出版：2018-02-15
- 稿件说明：
移动端阅览
张繁, 谢凡, 江颉. 网络威胁安全数据可视化综述[J]. 网络与信息安全学报, 2018,4(2):34-39.

Fan ZHANG, Fan XIE, Jie JIANG. Survey on the visualization technologies of threatening security data in cyber space[J]. Chinese Journal of Network and Information Security, 2018, 4(2): 34-39.
张繁, 谢凡, 江颉. 网络威胁安全数据可视化综述[J]. 网络与信息安全学报, 2018,4(2):34-39. DOI： 10.11959/j.issn.2096-109x.2018013.

Fan ZHANG, Fan XIE, Jie JIANG. Survey on the visualization technologies of threatening security data in cyber space[J]. Chinese Journal of Network and Information Security, 2018, 4(2): 34-39. DOI： 10.11959/j.issn.2096-109x.2018013.

摘要

在网络空间威胁手段日益复杂化的背景下，网络安全数据分析技术亟待提高。数据可视化技术已成为各类数据分析的理论框架和应用中的必备要素，并成为科学计算、商业智能、安全等领域中的普惠技术。网络威胁安全数据可视化通过提供有效的信息可视化交互手段，有效提升网络安全专家在分析网络空间安全问题过程中的认知能力。介绍了网络威胁安全数据可视化技术的研究现状和面临的问题，并对未来的发展趋势进行了展望。

Abstract

With the rapid development of the cyber threatening methods

the requirements of network security data analysis become more and more imperative.Data visualization has already evolved as a requisite tool among all kinds of data analysis theory framework and applications

especially in the fields of scientific computation

business intelligence and cyber security.Threatening security data visualization provides various effective interaction means which improve the perception ability for the cyber security specialists to get a distinctive insight into the large amount of complicated cyber security problems.The state-of-art cyber security data visualization technologies were introduced.Some existing problems that were still challenging research topics were investigated.Some directions for future studies were outlined.

关键词

Keywords

references

FISCHER F , FUCHS J , MANSMANN F , et al . BANKSAFE:visual analytics for big data in large-scale computer networks [J ] . Information Visualization , 2015 , 14 ( 1 ): 51 - 61 .

张焕国 , 韩文报 , 来学嘉 , 等 . 网络空间安全综述 [J ] . 中国科学:信息科学 , 2016 , 46 ( 2 ): 125 - 164 .

ZHANG H G , HAN W B , LAI X J , et al . Survey on cyberspace security [J ] . SCIENTIA SINICA Information is , 2016 , 46 ( 2 ): 125 - 164 .

SHIRAVI H , SHIRAVI A , GHORBANI A A . A survey of visualization systems for network security [J ] . IEEE Transactions on Visualization and Computer Graphics , 2012 , 18 ( 8 ): 1313 - 1329 .

ZHANG T Y , WANG X M , LI Z Z , et al . A survey of network anomaly visualization [J ] . Science China:Information Sciences , 2016 , 59 ( 1 ): 1 - 17 .

STAHELI D , YU T , JORDAN C R , et al . Visualization evaluation for cyber security:trends and future directions [C ] // IEEE Workshop on Visualization for Computer Security (VizSec) . 2014 .

POST T , WISCHGOLL T , BRYANT A R , et al . Visually guided flow tracking in software-defined networking [C ] // IEEE Workshop on Visualization for Computer Security(VizSec) . 2016 .

WARD M O , GRINSTEIN G , KEIM D . Interactive data visualization:foundations,techniques,and applications [M ] . A K Peters Press , 2010 .

陈为 , 沈则潜 , 陶煜波 . 数据可视化 [M ] . 北京 : 电子工业出版社 , 2013 .

CHEN W , SHEN Z Q , TAO Y B . Data visualization [M ] . Beijing : Publishing House of Electronics Industry , 2013 .

李建华 . 网络空间威胁情报感知、共享与分析技术综述 [J ] . 网络与信息安全学报 , 2016 , 2 ( 2 ): 16 - 29 .

LI J H . Overview of the technologies of threat intelligence sensing,sharing and analysis in cyber space [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 2 ): 16 - 29 .

李燕 , 曹宝香 , 马兆丰 , 等 . 关联分析算法在安全管理平台中的研究与应用 [J ] . 计算机技术与发展 , 2013 , 23 ( 10 ): 107 - 110 , 114 .

LI Y , CAO B X , MA Z F , et al . Research and application of correlation analysis in security management platform [J ] . Computer Technology and Development , 2013 , 23 ( 10 ): 107 - 110 , 114 .

赵颖 , 樊晓平 , 周芳芳 , 等 . 网络安全数据可视化综述 [J ] . 计算机辅助设计与图形学学报 , 2014 , 26 ( 5 ): 687 - 697 .

ZHAO Y , FAN X P , ZHOU F F , et al . A survey on network security data visualization [J ] . Journal of Computer-Aided Design ＆ Computer Graphics , 2014 , 26 ( 5 ): 687 - 697 .

赵颖 , 樊晓平 , 周芳芳 , 等 . 大规模网络安全数据协同可视分析方法研究 [J ] . 计算机科学与探索 , 2014 , 8 ( 7 ): 848 - 857 .

ZHAO Y , FAN X P , ZHOU F F , et al . Research on collaborative visual analysis of large scale network security data [J ] . Journal of Frontiers of Computer Science and Technology , 2014 , 8 ( 7 ): 848 - 857 .

赵颖 , 樊晓平 , 周芳芳 , 等 . 多源网络安全数据时序可视分析方法研究 [J ] . 小型微型计算机系统 , 2014 , 35 ( 4 ): 906 - 910 .

ZHAO Y , FAN X P , ZHOU F F , et al . Visualization of multi-source network security data based on stacked stream graph [J ] . Journal of Chinese Computer Systems , 2014 , 35 ( 4 ): 906 - 910 .

张胜 , 施荣华 , 赵颖 . 基于多元异构网络安全数据可视化融合分析方法 [J ] . 计算机应用 , 2015 , 35 ( 5 ): 1379 - 1384 , 1416 .

ZHANG S , SHI R H , ZHAO Y . Visual fusion and analysis for multivariate heterogeneous network security data [J ] . Journal of Computer Applications , 2014 , 35 ( 4 ): 1379 - 1384 , 1416 .

赵立军 , 张健 . 基于堆叠条形图和平行坐标的网络数据安全可视化分析方法研究 [J ] . 装备学院学报 , 2015 , 26 ( 5 ): 86 - 90 .

ZHAO L J , ZHANG J . Study on network data security visualization based on stacked bar chart and parallel coordinates [J ] . Journal of Equipment Academy , 2015 , 26 ( 5 ): 86 - 90 .

吴亚东 , 蒋宏宇 , 赵思蕊 , 等 . 网络安全数据3D可视化方法 [J ] . 电子科技大学学报 , 2015 , 44 ( 4 ): 594 - 598 .

WU Y D , JIANG H Y , ZHAO S R , et al . 3D visualization method for network security data [J ] . Journal of University of Electronic Science and Technology of China , 2015 , 44 ( 4 ): 594 - 598 .

BECKER R A , EICK S G , WILKS A R . Visualizing network data [J ] . IEEE Transactions on Visualization and Computer Graphics , 1995 , 1 ( 1 ): 16 - 28 .

MCPHERSON J , MA K , KRYSTOSK P , et al . PortVis:a tool for port-based detection of security events [C ] // IEEE Symposium on Visualization for Cyber Security(VizSec) . 2004 .

LAKKARAJU K , YURCIK W , BEARAVOLU R , et al . NVisionIP:an interactive network flow visualization tool for security [C ] // IEEE International Conference on Systems,Man and Cybernetics , 2004 .

GOODALL J R , LUTTERS W G , RHEINGANS P , et al . Preserving the big picture:visual network traffic analysis with TNV [C ] // IEEE Workshop on Visualization for Computer Security(VizSec) . 2005 .

CONTI G , ABDULLAH K , GRIZZARD J , et al . Countering security analyst and network administrator overload through alert and packet visualization [J ] . IEEE Computer Graphics and Applications , 2006 , 26 ( 2 ): 60 - 70 .

NYARKO K , CAPERS T , SCOTT C , et al . Network intrusion visualization with NIVA,an intrusion detection visual analyzer with paptic integration [C ] // The 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems . 2002 .

LIVNAT Y , AGUTTER J , MOON S , et al . A visualization paradigm for network intrusion detection [C ] // IEEE SMC Information Assurance Workshop . 2005 .

ABDULLAH K , LEE C , CONTI G , et al . IDS RainStorm:visualizing IDS alarms [C ] // IEEE Workshop on Visualization for Computer Security(VizSec) . 2005 .

BERTINI E , HERTZOG P , LALANNE D . SpiralView:towards security policies assessment through visual correlation of network resources with evolution of alarms [C ] // IEEE Conference on Visual Analytics Science and Technology (VAST’07) . 2007 .

SIADATI H , SAKET B , MEMON N . Detecting malicious logins in enterprise networks using visualization [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2016 .

SYAMKUMAR M , DURAIRAJAN R , BARFORD P . Bigfoot:a geo-based visualization methodology for detecting BGP threats [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2016 .

LING X , GERTH J , HANRAHAN P . Enhancing visual analysis of network traffic using a knowledge representation [C ] // IEEE Symposium on Visual Analytics Science and Technology . 2006 .

SHEN Z Q , MA K L , ELIASSI-RAD T . Visual analysis of large heterogeneous social networks by semantic and structural abstraction [J ] . IEEE Transactions on Visualization and Computer Graphics , 2006 , 12 ( 6 ): 1427 - 1439 .

IANNACONE M , BOHN S , NAKAMURA G , et al . Developing an ontology for cyber security knowledge graphs [C ] // The Cyber and Information Security Research . 2015 .

AUPETIT M , ZHAUNIAROVICH Y , VASILIADISM G , et al . Visualization of actionable knowledge to mitigate DRDoS attacks [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2016 .

YAO Y G , WANG X , MENG X J , et al . ISEK:an information security knowledge graph for CISP knowledge system [C ] // The International Conference on IT Convergence and Security (ICITCS) . 2015 .

YAO Y G , ZHANG L , YI J , et al . A framework for big data security analysis and the semantic technology [C ] // The International Conference on IT Convergence and Security (ICITCS) . 2016 .

CIAPESSONI E , CIRIO D , KJØLLE G , et al . Probabilistic risk-based security assessment of Power systems considering incumbent threats and uncertainties [J ] . IEEE Transactions on Smart Grid , 2016 , 7 ( 6 ): 2890 - 2903 .

彭勇 , 江常青 , 谢丰 , 等 . 工业控制系统信息安全研究进展 [J ] . 清华大学学报 , 2012 , 52 ( 10 ): 1396 - 1408 .

PONG Y , JIANG C Q , XIE F , et al . Industrial control system cyber security research [J ] . Journal of Tsinghua University , 2012 , 52 ( 10 ): 1396 - 1408 .

KAYNAR K , SIVRIKAYA F . Distributed attack graph generation [J ] . IEEE Transactions on Dependable and Secure Computing , 2016 , 13 ( 5 ): 519 - 532 .

YELIZAROV A , GAMAYUNOV D . Visualization of complex attacks and state of attacked network [C ] // IEEE Workshop on Visualization for Computer Security (VizSec) . 2009 .

WANG T B , XIA C H , WEN S , et al . SADI:A novel model to study the propagation of social worms in hierarchical networks [J ] . IEEE Transactions on Dependable and Secure Computing , 2015 , 99 : 1 - 17 .

STANGE J , DÖRK M , LANDSTORFER J , et al . Visual filter:graphical exploration of network security log files [C ] // IEEE Symposium on Visualization for Cyber Security (VizSec) . 2014 .

ZHAO Y , LIANG X , FAN X P , et al . MVSec:multi-perspective and deductive visual analytics on heterogeneous network security data [J ] . Journal of Visualization , 2014 , 17 ( 3 ): 181 - 196 .

赵颖 , 王权 , 黄叶子 , 等 . 多视图合作的网络流量时序数据可视分析 [J ] . 软件学报 , 2016 , 27 ( 5 ): 1188 - 1198 .

ZHAO Y , WANG Q , HUANG Y Z , et al . Collaborative visual analytics for network traffic time-series data with multiple views [J ] . Journal of Software , 2016 , 27 ( 5 ): 1188 - 1198 .

ZHOU F F , HUANG W , ZHAO Y , et al . ENTVis:a visual analytic tool for entropy-based network traffic anomaly detection [J ] . IEEE Computer Graphics and Applications , 2015 , 35 ( 6 ): 42 - 50 .

SHI L , WANG C , WEN Z , et al . 1.5D Egocentric dynamic network visualization [J ] . IEEE Transactions on Visualization and Computer Graphics , 2015 , 21 ( 5 ): 624 - 637 .

LANEY D . Information economics,big data and the art of the possible with analytics [EB/OL ] . https://www-950.ibm.com/events/wwe/grp/grp037.nsf/vLookupPDFs/Gartner_Doug-%20Analytics/$file/Gartner_Doug-%20Analytics.pdf https://www-950.ibm.com/events/wwe/grp/grp037.nsf/vLookupPDFs/Gartner_Doug-%20Analytics/$file/Gartner_Doug-%20Analytics.pdf .

CORREA C D , CRNOVRSANIN T , MA K . Visual reasoning about social networks using centrality sensitivity [J ] . IEEE Transactions on Visualization and Computer Graphics , 2012 , 18 ( 1 ): 106 - 120 .

ARIETTA S M , EFROS A A , RAMAMOORTHI R , et al . City forensics:using visual elements to predict non-visual city attributes [J ] . IEEE Transactions on Visualization and Computer Graphics , 2016 , 20 ( 12 ): 2624 - 2633 .

WANG F , CHEN W , WU F R , et al . A visual reasoning approach for data-driven transport assessment on urban roads [C ] // IEEE Conference on Visual Analytics Science and Technology (VAST) . 2014 .

CAO N , SHI C L , LIN S , et al . TargetVue:visual analysis of anomalous user behaviors in online communication systems [J ] . IEEE Transactions on Visualization and Computer Graphics , 2016 , 22 ( 1 ): 280 - 289 .

SAKET B , KIM H , BROWN E T , et al . Visualization by demonstration:an interaction paradigm for visual data exploration [J ] . IEEE Transactions on Visualization and Computer Graphics , 2017 , 23 ( 1 ): 331 - 340 .

浏览量

5880

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

网络空间威胁情报感知、共享与分析技术综述

基于人工智能的期货交易风险评估与预警方法

金融数据安全治理智能化技术与实践

基于隐私风险评估的脱敏算法自适应方法

本科“机器学习”课程教学改革初探