关键词: 信息可视化, 可视分析, 网络安全, 数据融合, 堆叠流图, 雷达图

Abstract: Network security visualization is a growing community of network security research in recent years. It provides the human security analysts with better tools to discover patterns, detect anomalies, identify correlations of security events with higher efficiency. To meet the demand of cooperative visual analytics on large-scale network and multi-source data, this paper develops a data fusion model based on the even tuple and statistics tuple within uniform data formats, raises a design strategy including the radial graph that is good at parsing events correlations and comparative stacked stream that is good at comparing statistics time series, explores the automated deployment method based on network logic topology and edge bundling method in radial graph. Finally by utilizing the proposed prototype system to analyze network security datasets in VAST Challenge 2013 and conducting some experiments and discussions, the effectiveness of tools is verified and substantiated.

Key words: information visualization, visual analytics, network security, data fusion, stacked stream graph, radial graph