skip to main content
OSTI.GOV title logo U.S. Department of Energy
Office of Scientific and Technical Information

Title: PortVis: A Tool for Port-Based Detection of Security Events

Conference ·

Most visualizations of security-related network data require large amounts of finely detailed, high-dimensional data. However, in some cases, the data available can only be coarsely detailed because of security concerns or other limitations. How can interesting security events still be discovered in data that lacks important details, such as IP addresses, network security alarms, and labels? In this paper, we discuss a system we have designed that takes very coarsely detailed data-basic, summarized information of the activity on each TCP port during each given hour-and uses visualization to help uncover interesting security events.

Research Organization:
Lawrence Livermore National Lab. (LLNL), Livermore, CA (United States)
Sponsoring Organization:
DOE Contract Number:
Report Number(s):
UCRL-CONF-205756; TRN: US200807%%830
Resource Relation:
Conference: Presented at: VizSec/DMSEC 2004, Fairfax, VA, United States, Oct 29 - Oct 29, 2004
Country of Publication:
United States