VisSecAnalyzer: A Visual Analytics Tool for Network Security Assessment

Igor Kotenko (1) , Evgenia Novikova (1)

1 Laboratory of Computer Security Problems [Saint Petersbourg]

Visualization is the essential part of Security Information and Event Management (SIEM) systems. The paper suggests a common framework for SIEM visualization which allows incorporating different visualization technologies and extending easily the application functionality. To illustrate the framework, we developed a SIEM visualization component VisSecAnalyzer. The paper demonstrates its possibilities for the tasks of attack modeling and security assessment. To increase the efficiency of the visualization techniques we applied the principles of the human information perception and interaction.

Mots clés: security information visualization; vulnerability analysis and countermeasures; attack graph visualization; information perception and interaction

Domaines: Informatique [cs]; Sciences de l'information et de la communication

Igor Kotenko, Evgenia Novikova. VisSecAnalyzer: A Visual Analytics Tool for Network Security Assessment. 1st Cross-Domain Conference and Workshop on Availability, Reliability, and Security in Information Systems (CD-ARES), Sep 2013, Regensburg, Germany. pp.345-360. ⟨hal-01506568⟩