Using relational graphs for exploratory analysis of network traffic data

Logo poskytovatele

Varování

Publikace nespadá pod Filozofickou fakultu, ale pod Ústav výpočetní techniky. Oficiální stránka publikace je na webu muni.cz.
Autoři

ČERMÁK Milan FRITZOVÁ Tatiana RUSŇÁK Vít ŠRÁMKOVÁ Denisa

Rok publikování 2023
Druh Článek v odborném periodiku
Časopis / Zdroj Forensic Science International: Digital Investigation
Fakulta / Pracoviště MU

Ústav výpočetní techniky

Citace
www https://doi.org/10.1016/j.fsidi.2023.301563
Doi http://dx.doi.org/10.1016/j.fsidi.2023.301563
Klíčová slova Relational analytics;Network forensics;Visual analytics;Granef;Cybersecurity
Přiložené soubory
Popis The human brain is designed to perceive the surrounding world as associations. These associations between the individual pieces of information allow us to analyze and categorize new inputs and thus understand them. However, the support for association-based analysis in traditional network analysis tools is only limited or not present at all. These tools are mostly based on manual browsing, filtering, and aggregation, with only basic support for statistical analyses and visualizations for communicating the general characteristics. Yet, it is the relationship diagram that could allow the analysts to get a broader context and reveal the associations hidden in the data. In this paper, we explore the possibilities of relational analysis as a novel paradigm for network forensics. We provide a set of user requirements based on the discussion with domain experts and introduce a novel visual analysis tool utilizing multimodal graphs for modeling relationships between entities from captured packet traces. Finally, we demonstrate the relational analysis process on two use cases and discuss feedback from domain experts.
Související projekty:

Používáte starou verzi internetového prohlížeče. Doporučujeme aktualizovat Váš prohlížeč na nejnovější verzi.