Description: We present a visualization design to enhance the ability of
an administrator to detect and investigate anomalous traffic
between a local network and external domains. Central to
the design is a parallel axes view which displays NetFlow
records as links between two machines or domains while
employing a variety of visual cues to assist the user. We
describe several filtering options that can be employed to
hide uninteresting or innocuous traffic such that the user
can focus his or her attention on the more unusual network
flows.
To Search:
File list (Check if you may need any files):
VisFlowConnect.pdf
Download