Personal tools
You are here: Home pubs VizSEC 2005 Proceedings Multiple coordinated views for network attack graphs
Document Actions

S Noel, M Jacobs, Kalapa Pramod, and Jajodia Sushil (2005)

Multiple coordinated views for network attack graphs

In: VizSEC: Proceedings of the IEEE Workshop on Visualization for Computer Security, pages 99–106.

While efficient graph-based representations have been developed for modeling combinations of low-level network attacks, relatively little attention has been paid to effective techniques for visualizing such attack graphs. This paper describes a number of new attack graph visualization techniques, each having certain desirable properties and offering different perspectives for solving different kinds of problems. Moreover, the techniques we describe can be applied not only separately, but can also be combined into coordinated attack graph views. We apply improved visual clustering to previously described network protection domains (attack graph cliques), which reduces graph complexity and makes the overall attack flow easier to understand. We also visualize the attack graph adjacency matrix, which shows patterns of network attack while avoiding the clutter usually associated with drawing large graphs. We show how the attack graph adjacency matrix concisely conveys the impact of network configuration changes on attack graphs. We also describe a novel attack graph filtering technique based on the interactive navigation of a hierarchy of attack graph constraints. Overall, our techniques scale quadratically with the number of machines in the attack graph.
 
by John Goodall last modified 2008-01-29 10:45
Log in


Forgot your password?
New user?
related from amazon
Navigation
 
Sponsored by

google search
Google
advertisements
 

Powered by Plone CMS, the Open Source Content Management System

This site conforms to the following standards: