VAFLE: visual analytics of firewall log events

Mohammad Ghoniem; Georgiy Shurkhovetskyy; Ahmed Bahey; Benoît Otjacques

doi:10.1117/12.2037790

3 February 2014 VAFLE: visual analytics of firewall log events

Mohammad Ghoniem, Georgiy Shurkhovetskyy, Ahmed Bahey, Benoît Otjacques

Proceedings Volume 9017, Visualization and Data Analysis 2014; 901704 (2014) https://doi.org/10.1117/12.2037790
Event: IS&T/SPIE Electronic Imaging, 2014, San Francisco, California, United States

Abstract

In this work, we present VAFLE, an interactive network security visualization prototype for the analysis of firewall log events. Keeping it simple yet effective for analysts, we provide multiple coordinated interactive visualizations augmented with clustering capabilities customized to support anomaly detection and cyber situation awareness. We evaluate the usefulness of the prototype in a use case with network traffic datasets from previous VAST Challenges, illustrating its effectiveness at promoting fast and well-informed decisions. We explain how a security analyst may spot suspicious traffic using VAFLE. We further assess its usefulness through a qualitative evaluation involving network security experts, whose feedback is reported and discussed.

Citation Download Citation

Mohammad Ghoniem, Georgiy Shurkhovetskyy, Ahmed Bahey, and Benoît Otjacques "VAFLE: visual analytics of firewall log events", Proc. SPIE 9017, Visualization and Data Analysis 2014, 901704 (3 February 2014); https://doi.org/10.1117/12.2037790

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available