CyberPetri at CDX 2016: Real-time Network Situation Awareness

Conference · Mon Oct 24 00:00:00 EDT 2016

DOI:https://doi.org/10.1109/VIZSEC.2016.7739584· OSTI ID:1346299

Arendt, Dustin L.; Best, Daniel M.; Burtner, Edwin R.; Paul, Celeste

CyberPetri is a novel visualization technique that provides a flexible map of the network based on available characteristics, such as IP address, operating system, or service. Previous work introduced CyberPetri as a visualization feature in Ocelot, a network defense tool that helped security analysts understand and respond to an active defense scenario. In this paper we present a case study in which we use the CyberPetri visualization technique to support real-time situation awareness during the 2016 Cyber Defense Exercise.

• Research Organization: Pacific Northwest National Lab. (PNNL), Richland, WA (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC05-76RL01830
• OSTI ID: 1346299
• Report Number(s): PNNL-SA-119384; 453040300
• Resource Relation: Conference: IEEE Symposium on Visualization for Cyber Security (VizSec 2016), October 24, 2016, Baltimore, Maryland
• Country of Publication: United States
• Language: English

Related Subjects

Cybersecurity
situation awareness
visualization