Security Visualization 
by Raffael Marty
Raffael Marty is chief security strategist and senior product manager at Splunk. Fully immersed in industry initiatives, standards efforts and activities, Raffy lives and breathes security and visualization. He is the author of 'Applied Security Visualization,' published Aug 1, 2008 by Addison-Wesley Professional.
all posts
Maturity Scale for IT Data Management
How does the IT data management -- the market that is an umbrella for log management, security information management, and security event management -- look? What are some of the implications based on the maturity scale? Why do some SIM/SEM projects fail and others don't? Are you ripe for advanced analytics and visualization?
|
How do you encode hundreds of data points into one single graph? Use Sparklines.
Have you tried to visualize your traffic flows? Did you have the problem that your graphs got really cluttered? Did you find a way around that problem? Did you filter data? Did you aggregate multiple nodes into one?
|
How do you visualize your traffic flow (NetFlow) logs?
What are you doing with your traffic flow logs, such as NetFlow? How long does it normally take you to understand what exactly the log entries represent? What if you could generate a visual representation of the machines communicating on your network? Would that make your analysis work easier?
|
How do you prepare your security data for visualization?
Do you know how much traffic is transmitted on your networks? Do you know what protocols are in use and what machines are using them? Are there spyware infected machines on your network that leak information?
|
