Towards Effective Collaborative Analysis for Distributed Intrusion Detection
Xianlin Hu, Guanghua Song, Lane Harrison, Aidong Lu, Jinzhu Gao, Weichao Wang · 2011
This paper addresses the problem of collaborative analy-sis in a distributed setting via a network security applica-tion. Network security analysis often requires accurate and timely results, which is very challenging to achieve in large dynamic networks with a single user. To address this issue, we design and develop a collaborative detection mecha-nism for complex intrusion detection applications. We also establish a set of collaboration guidelines for team coordi-nation with distributed visualization tools. These collab-oration guidelines cover the designs of coordination roles, workflow, collaborative environments and human computer interactions. We apply them to generate a prototype system with interactions that facilitates collaborative visual analy-sis. According to the expert feedback acquired for assess-ing our approach, we propose directions for improving the efficiency of collaborative analysis. KEYWORDS Distributed collaborative analysis, computer supported co-operative work, human-work interaction design, guidelines and design heuristics 1