Can I read CORGI: combination, organization and reconstruction through graphical interactions on EtoBox?

CORGI: combination, organization and reconstruction through graphical interactions by Christopher Humphries; Nicolas Prigent; Christophe Bidan; Frédéric Majorczyk is a scholarly article available to read on EtoBox.

What is CORGI: combination, organization and reconstruction through graphical interactions about?

In this article, we present CORGI, a security-oriented log visualization tool that allows security experts to visually explore and link numerous types of log files through relevant representations and global filtering. The analyst can mark values as values of interest and then use these values to pursue the exploration in other log files, allowing him to better understand events and reconstruct attack scenarios. We present the user interface and interactions that ensure these capabilities and provide two use cases based on challenges from VAST and from the Honeynet project.

Author

Christopher Humphries; Nicolas Prigent; Christophe Bidan; Frédéric Majorczyk

Publisher

ACM

Published

2014

Language

EN