A tri-linear visualization for network anomaly detection

Robert B. Whitaker; Robert F. Erbacher

doi:10.1117/12.872697

24 January 2011 A tri-linear visualization for network anomaly detection

Robert B. Whitaker, Robert F. Erbacher

Proceedings Volume 7868, Visualization and Data Analysis 2011; 78680P (2011) https://doi.org/10.1117/12.872697
Event: IS&T/SPIE Electronic Imaging, 2011, San Francisco Airport, California, United States

Abstract

This research discusses a novel application of ternary plots to the visualization of network traffic data. These plots prove to be enormously effective at identifying anomalous network activity and can be valuable in monitoring network activity much more efficiently than can be done with existing techniques. The visualization was implemented in our existing visualization infrastructure to reduce development time. Testing was performed on actual network traffic data collected from a local network. Multiple anomalies were easily identifiable within the data set without any prior knowledge as to the contents of the test file. This paper discusses the ternary plot and its application to network traffic data, the formulas needed to calculate and display ternary coordinates, and the basic architecture for the visualization implementation.

Citation Download Citation

Robert B. Whitaker and Robert F. Erbacher "A tri-linear visualization for network anomaly detection", Proc. SPIE 7868, Visualization and Data Analysis 2011, 78680P (24 January 2011); https://doi.org/10.1117/12.872697

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available