Title
Monitoring large IP spaces with ClockView.
Abstract
The growing amounts of hosts that are placed into the networks represent an enormous challenge to most network administrators who have to monitor these hosts conscientiously. While automatically monitoring the network for slow or failing components has become common practice, defining an acceptable state of the system is only possible to a very limited extent and thus exploratory analysis tasks by real human analysts complement the analysis process. However, this is a problem of scale since it is infeasible to manually inspect thousands of hosts without proper visual support for the tasks of gaining an overview, focusing and retrieving details on demand. In this paper we present a design study to enable visual support for monitoring large IP spaces. In particular, the presented system features 1) a scalable glyph representation in the style of a clock for giving an overview of the activity over time of thousands of hosts in the network, 2) subnet and port views for focusing the analysis to a particular subset of the data and 3) detailed pixel matrix visualizations for interpreting concrete traffic patterns. Furthermore, the tool's feedback loop, which is implemented through interaction capabilities, allows for retrieving new details, refocusing and enhancing of the overview.
Year
DOI
Venue
2011
10.1145/2016904.2016906
VizSEC
Keywords
DocType
Citations 
hosts conscientiously,visual support,network administrator,particular subset,acceptable state,analysis process,proper visual support,exploratory analysis task,system feature,monitoring large ip space,retrieving detail
Conference
24
PageRank 
References 
Authors
1.29
7
3
Name
Order
Citations
PageRank
Christopher Kintzel1241.29
Fuchs, J.220615.29
Florian Mansmann358935.91