Title
Accelerating Network Traffic Analytics Using Query-Driven Visualization
Abstract
Realizing operational analytics solutions where large and complex data must be analyzed in a time-critical fashion entails integrating many different types of technology. This paper focuses on an interdisciplinary combination of scientific data management and visualization/analysis technologies targeted at reducing the time required for data filtering, querying, hypothesis testing and knowledge discovery in the domain of network connection data analysis. We show that use of compressed bitmap indexing can quickly answer queries in an interactive visual data analysis application, and compare its performance with two alternatives for serial and parallel filtering/querying on 2.5 billion records' worth of network connection data collected over a period of 42 weeks. Our approach to visual network connection data exploration centers oil two primary factors: interactive ad-hoc and multiresolution query forinulation and execution over n dimensions and visual display of the n-dimensional histogram results. This combination is applied ill a case study to detect a distributed network scan and to then identify the set of remote hosts participating in the attack. Our approach is sufficiently general to be applied to a diverse set of data understanding problems as well as used in conjunction with a diverse set of analysis and Visualization tools.
Year
DOI
Venue
2006
10.1109/VAST.2006.261437
VAST 2006: IEEE SYMPOSIUM ON VISUAL ANALYTICS SCIENCE AND TECHNOLOGY, PROCEEDINGS
Keywords
Field
DocType
query-driven visualization, network security, data mining, visual analytics
Data mining,Histogram,Visualization,Computer science,Visual analytics,Interactive visual analysis,Knowledge extraction,Analytics,Data management,Statistical hypothesis testing
Conference
ISSN
Citations 
PageRank 
2325-9442
11
0.93
References 
Authors
24
5
Name
Order
Citations
PageRank
E. Wes Bethel143839.76
stephen d campbell2110.93
Eli Dart3566.44
Kurt Stockinger41471127.33
Kesheng Wu51231108.30