Security Visualization

RSS Link

by Raffael Marty

Raffael Marty most recently co-founded Loggly, a cloud-based log management company. As an entrepreneur, he is interested in enterprise and infrastructure startups, business models, and technologies. He has been a long term data analysis and visualization enthusiast and has spent a lot of time building and defining the security visualization space through open source tools, writing books, a number of papers, and speaking at conferences around the world. He is frequently consulting as an industry expert in all aspects of log analysis, computer security, and data visualization. Raffy has held various positions in the log management space at companies like Splunk, ArcSight, and IBM research where he also earned his masters in computer science. In addition to visualization, big data analysis, and computer security, Raffy is all over cloud-based business models.

Maturity Scale for IT Data Management

Posted Jan 05, 2009 - 08:28 pm

How does the IT data management -- the market that is an umbrella for log management, security information management, and security event management -- look? What are some of the implications based on the maturity scale? Why do some SIM/SEM projects fail and others don't? Are you ripe for advanced analytics and visualization?
- Like
- Tweet
- Security, corrrelation, log management
How do you encode hundreds of data points into one single graph? Use Sparklines.

Posted Nov 30, 2008 - 05:13 pm

Have you tried to visualize your traffic flows? Did you have the problem that your graphs got really cluttered? Did you find a way around that problem? Did you filter data? Did you aggregate multiple nodes into one?
- Like
- Tweet
- Security, network, sparklines
How do you visualize your traffic flow (NetFlow) logs?

Posted Nov 18, 2008 - 09:05 am

What are you doing with your traffic flow logs, such as NetFlow? How long does it normally take you to understand what exactly the log entries represent? What if you could generate a visual representation of the machines communicating on your network? Would that make your analysis work easier?
How do you prepare your security data for visualization?

Posted Nov 17, 2008 - 12:46 pm

Do you know how much traffic is transmitted on your networks? Do you know what protocols are in use and what machines are using them? Are there spyware infected machines on your network that leak information?
- 5 comments
- Like
- Tweet
- Security, netflow, parser
What is the right graph to use in what situation?

Posted Nov 06, 2008 - 08:39 pm

Do you like pie charts? Have you ever thought about replacing them with a bar chart? Or a line chart? Do you know when to use what chart?
- 2 comments
- Like
  
  1
- Tweet
- Security, charts, parallell coordinates
How do you create good visualizations?

Posted Nov 04, 2008 - 04:32 pm

I am sure you have seen graphs that were just horrible to look at. Even worse, it was almost impossible to determine what the graph was trying to communicate. One of the first things you should learn - before you even go ahead and generate a graph - are some simple visualization principles.
- Like
- Tweet
- Security, security visualization, tufte
How Do You Get Started With Security Visualization?

Posted Nov 03, 2008 - 12:27 am

Are you in charge of analyzing large amounts of security data? Have you ever wondered whether there is a better way than reading your logs line by line? Here are some starting points on how to visualize your security data.
- Like
- Tweet
- Security, analytics, applied

February is...
Open Source Month

FEATURE: Spotlight on open source
TRAINING: Win FREE Java training from ITworld and Webucator
CAREER: What to Include in Your Open Source Resume
LIST: 10 best (unknown) open source projects

Will Do Not Track kill the 'free' Internet?

8 comments
How to avoid being tagged as a terrorist: Don't pay cash for coffee

6 comments
How to kill Web trackers dead

3 comments
Even after rewrites, Google Wallet retains gaping security holes, mainly due to Android

3 comments
Is this the best file on Steve Jobs the FBI could come up with?

2 comments

White Papers & Webcasts

White Paper

Business Value of Blade

The nature of the blade platform makes system management, monitoring and provisioning easy and efficient. Access this resource to learn how blade migration will save your data center time and money while increasing performance.

White Paper

Measuring the Business Value of CI in the Data Center - IDC-HP White Paper

One of the key strategies that IT teams are pursuing to reduce capital costs while boosting asset utilization and employee productivity is the transition to highly virtualized data centers. However, IDC finds that expectations for further boosts in IT asset use and operational efficiency often surpass the actual results for a variety of reasons. These problems can quickly overwhelm any hoped-for benefits as the scope of virtual server deployment expands.

White Paper

HP CloudSystem Matrix: Managing at a Higher Level

This white paper examines IT management challenges from a fundamental and system standpoint. In addition, it introduces the concept of a service-oriented and automated approach to IT management.

White Paper

Five Myths of Cloud Computing

Cloud computing continues to grow in popularity among the IT industry. And more businesses are advertising that they are the front runner for providing the best cloud services. However, in this race to remain top dog, IT pros remain unsure of what cloud computing is and the benefits it can bring to their organization.

White Paper

Accelerate time to application value

For your IT organization to keep pace with the business, you need a new, faster approach to infrastructure deployment-an approach that increases agility and accelerates time to application value. That's HP Converged Systems. Built on Converged Infrastructure, these systems deliver the industry's first portfolio of pre-integrated, tested, and optimized infrastructure solutions for applications running in virtual, cloud, dedicated, or hybrid environments.

See more White Papers | Webcasts