Design and implementation of real-time visualization tool for network security monitoring
Aneela Safdar, Hanif Durad, Masoom Alam · 2018
A picture is worth a thousand words. Everyone knows that images are used to efficiently communicate information. For instance in network monitoring, instead of handing someone a log file that records how an attack happened, one can use a picture, a visual representation of the log records. Visualization is becoming more and more important as time to focus on every little detail is running out. For this very reason most of the Complex Event Processor's manufacturers consider integrating dashboards in their product very critical and of high priority. This project deals with pictorial monitoring of network traffic and its associated anomalies by employing open-source tools only. It also focuses on near-miss events which could lead to disastrous results via constant real time network monitoring, so that every critical information is provided promptly. Overall implementation can be considered as aggregation of the processes like Collection of Data, Detection of atypical and abnormal activities through their Analysis, Extraction of core information and last but not the least its display in a comprehensible and intelligible manner so that for the viewer it would take a few seconds to see whats going on in the network.