Can I read Visual Filter: Graphical Exploration of Network Security Log Files on EtoBox?

Visual Filter: Graphical Exploration of Network Security Log Files by Jan-Erik Stange; Marian Dörk; Johannes Landstorfer; Reto Wettach is a scholarly article available to read on EtoBox.

What is Visual Filter: Graphical Exploration of Network Security Log Files about?

Network log files often need to be investigated manually for suspicious activity. The huge amount of log lines complicates maintaining an overview, navigation and quick pattern identification. We propose a system that uses an interactive visualization, a visual filter, representing the whole log in an overview, allowing to navigate and make context-preserving subselections with the visualization and in this way reducing the time and effort for security experts needed to identify patterns in the log file. This explorative interactive visualization is combined with focused querying to search for known suspicious terms that are then highlighted in the visualization and the log file itself.

Author

Jan-Erik Stange; Marian Dörk; Johannes Landstorfer; Reto Wettach

Publisher

ACM

Published

2014

Language

EN