KOPS - Das Institutionelle Repositorium der Universität Konstanz

VisTracer : a visual analytics tool to investigate routing anomalies in traceroutes

VisTracer : a visual analytics tool to investigate routing anomalies in traceroutes

Zitieren

Dateien zu dieser Ressource

Dateien Größe Format Anzeige

Zu diesem Dokument gibt es keine Dateien.

FISCHER, Fabian, Johannes FUCHS, Pierre-Antoine VERVIER, Florian MANSMANN, Olivier THONNARD, 2012. VisTracer : a visual analytics tool to investigate routing anomalies in traceroutes. the Ninth International Symposium. Seattle, Washington, 15. Okt 2012 - 15. Okt 2012. In: Proceedings of the Ninth International Symposium on Visualization for Cyber Security - VizSec '12. the Ninth International Symposium. Seattle, Washington, 15. Okt 2012 - 15. Okt 2012. New York, New York, USA:ACM Press, pp. 80-87. ISBN 978-1-4503-1413-8

@inproceedings{Fischer2012VisTr-22282, title={VisTracer : a visual analytics tool to investigate routing anomalies in traceroutes}, year={2012}, doi={10.1145/2379690.2379701}, isbn={978-1-4503-1413-8}, address={New York, New York, USA}, publisher={ACM Press}, booktitle={Proceedings of the Ninth International Symposium on Visualization for Cyber Security - VizSec '12}, pages={80--87}, author={Fischer, Fabian and Fuchs, Johannes and Vervier, Pierre-Antoine and Mansmann, Florian and Thonnard, Olivier} }

<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:bibo="http://purl.org/ontology/bibo/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:dcterms="http://purl.org/dc/terms/" xmlns:xsd="http://www.w3.org/2001/XMLSchema#" > <rdf:Description rdf:about="https://kops.uni-konstanz.de/rdf/resource/123456789/22282"> <dcterms:available rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2013-03-01T14:29:46Z</dcterms:available> <dc:contributor>Mansmann, Florian</dc:contributor> <dc:contributor>Fischer, Fabian</dc:contributor> <dc:contributor>Fuchs, Johannes</dc:contributor> <dc:date rdf:datatype="http://www.w3.org/2001/XMLSchema#dateTime">2013-03-01T14:29:46Z</dc:date> <dc:creator>Mansmann, Florian</dc:creator> <dcterms:issued>2012</dcterms:issued> <dcterms:title>VisTracer : a visual analytics tool to investigate routing anomalies in traceroutes</dcterms:title> <dc:creator>Thonnard, Olivier</dc:creator> <dc:contributor>Vervier, Pierre-Antoine</dc:contributor> <dc:creator>Vervier, Pierre-Antoine</dc:creator> <dc:creator>Fischer, Fabian</dc:creator> <dc:creator>Fuchs, Johannes</dc:creator> <dc:contributor>Thonnard, Olivier</dc:contributor> <dc:rights>deposit-license</dc:rights> <dcterms:bibliographicCitation>Proceedings of the Ninth International Symposium on Visualization for Cyber Security. - New York, NY : ACM, 2012. - S. 80-87. - ISBN 978-1-4503-1413-8</dcterms:bibliographicCitation> <bibo:uri rdf:resource="http://kops.uni-konstanz.de/handle/123456789/22282"/> <dcterms:abstract xml:lang="deu">Routing in the Internet is vulnerable to attacks due to the insecure design of the border gateway protocol (BGP). One possible exploitation of this insecure design is the hijacking of IP blocks. Such hijacked IP blocks can then be used to conduct malicious activities from seemingly legitimate IP addresses. In this study we actively trace and monitor the routes to spam sources over several consecutive days after having received a spam message from such a source. However, the real challenge is to distinguish between legitimate routing changes and those ones that are related to systematic misuse in so-called spam campaigns. To combine the strengths of human judgement and computational efficiency, we thus present a novel visual analytics tool named Vistracer in this paper. This tool represents analysis results of our anomaly detection algorithms on large traceroute data sets with the help of several scalable representations to support the analyst to explore, identify and analyze suspicious events and their relations to malicious activities. In particular, pixel-based visualization techniques, novel glyph-based summary representations and a combination of temporal glyphs in a graph representation are used to give an overview of route changes to specific destinations over time. To evaluate our tool, real-world case studies demonstrate the usage of Vistracer in practice on large-scale data sets.</dcterms:abstract> <dc:language>eng</dc:language> <dcterms:rights rdf:resource="http://nbn-resolving.org/urn:nbn:de:bsz:352-20140905103605204-4002607-1"/> </rdf:Description> </rdf:RDF>

Das Dokument erscheint in:

KOPS Suche


Stöbern

Mein Benutzerkonto