{"id":"https://openalex.org/W1922573661","doi":"https://doi.org/10.1109/vizsec.2015.7312763","title":"Ocelot: user-centered design of a decision support visualization for network quarantine","display_name":"Ocelot: user-centered design of a decision support visualization for network quarantine","publication_year":2015,"publication_date":"2015-10-25","ids":{"openalex":"https://openalex.org/W1922573661","doi":"https://doi.org/10.1109/vizsec.2015.7312763","mag":"1922573661"},"language":"en","primary_location":{"id":"doi:10.1109/vizsec.2015.7312763","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2015.7312763","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035437939","display_name":"Dustin Arendt","orcid":"https://orcid.org/0000-0003-2466-199X"},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Dustin L. Arendt","raw_affiliation_strings":["Pacific Northwest National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061232045","display_name":"Russ Burtner","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Russ Burtner","raw_affiliation_strings":["Pacific Northwest National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054038232","display_name":"Daniel M. Best","orcid":null},"institutions":[{"id":"https://openalex.org/I142606810","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I142606810","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel M. Best","raw_affiliation_strings":["Pacific Northwest National Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pacific Northwest National Laboratory","institution_ids":["https://openalex.org/I142606810"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108763019","display_name":"Nathan D. Bos","orcid":null},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]},{"id":"https://openalex.org/I2802946424","display_name":"Johns Hopkins University Applied Physics Laboratory","ror":"https://ror.org/029pp9z10","country_code":"US","type":"facility","lineage":["https://openalex.org/I145311948","https://openalex.org/I2802946424"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nathan D. Bos","raw_affiliation_strings":["University Applied Physics Laboratory","Johns Hopkins University Applied Physics laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Applied Physics Laboratory","institution_ids":[]},{"raw_affiliation_string":"Johns Hopkins University Applied Physics laboratory","institution_ids":["https://openalex.org/I2802946424","https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090962324","display_name":"John Gersh","orcid":"https://orcid.org/0000-0001-5552-3472"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]},{"id":"https://openalex.org/I2802946424","display_name":"Johns Hopkins University Applied Physics Laboratory","ror":"https://ror.org/029pp9z10","country_code":"US","type":"facility","lineage":["https://openalex.org/I145311948","https://openalex.org/I2802946424"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John R. Gersh","raw_affiliation_strings":["University Applied Physics Laboratory","Johns Hopkins University Applied Physics laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Applied Physics Laboratory","institution_ids":[]},{"raw_affiliation_string":"Johns Hopkins University Applied Physics laboratory","institution_ids":["https://openalex.org/I2802946424","https://openalex.org/I145311948"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043500353","display_name":"Christine Piatko","orcid":"https://orcid.org/0000-0002-5295-9112"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]},{"id":"https://openalex.org/I2802946424","display_name":"Johns Hopkins University Applied Physics Laboratory","ror":"https://ror.org/029pp9z10","country_code":"US","type":"facility","lineage":["https://openalex.org/I145311948","https://openalex.org/I2802946424"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christine D. Piatko","raw_affiliation_strings":["University Applied Physics Laboratory","Johns Hopkins University Applied Physics laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Applied Physics Laboratory","institution_ids":[]},{"raw_affiliation_string":"Johns Hopkins University Applied Physics laboratory","institution_ids":["https://openalex.org/I2802946424","https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089547246","display_name":"Celeste Lyn Paul","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Celeste Lyn Paul","raw_affiliation_strings":["Department of Defense"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Defense","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5035437939"],"corresponding_institution_ids":["https://openalex.org/I142606810"],"apc_list":null,"apc_paid":null,"fwci":2.9947,"has_fulltext":false,"cited_by_count":37,"citation_normalized_percentile":{"value":0.940937,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.96670001745224,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8128015995025635},{"id":"https://openalex.org/keywords/visual-analytics","display_name":"Visual analytics","score":0.7528985738754272},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.7307397127151489},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.5357365608215332},{"id":"https://openalex.org/keywords/decision-support-system","display_name":"Decision support system","score":0.5276036858558655},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.45562031865119934},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.4200293719768524},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.41615742444992065},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.28966283798217773},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.25497859716415405}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8128015995025635},{"id":"https://openalex.org/C59732488","wikidata":"https://www.wikidata.org/wiki/Q2528440","display_name":"Visual analytics","level":3,"score":0.7528985738754272},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.7307397127151489},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.5357365608215332},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.5276036858558655},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.45562031865119934},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.4200293719768524},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.41615742444992065},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.28966283798217773},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25497859716415405},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C66938386","wikidata":"https://www.wikidata.org/wiki/Q633538","display_name":"Structural engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/vizsec.2015.7312763","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2015.7312763","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6600000262260437}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306078","display_name":"U.S. Department of Defense","ror":"https://ror.org/0447fe631"},{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320310145","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95"},{"id":"https://openalex.org/F4320338354","display_name":"Pacific Northwest National Laboratory","ror":"https://ror.org/05h992307"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":54,"referenced_works":["https://openalex.org/W127312605","https://openalex.org/W132116302","https://openalex.org/W136978531","https://openalex.org/W137092006","https://openalex.org/W950821216","https://openalex.org/W1494756088","https://openalex.org/W1539816672","https://openalex.org/W1572876171","https://openalex.org/W1595973166","https://openalex.org/W1966335190","https://openalex.org/W1981846302","https://openalex.org/W1986111422","https://openalex.org/W1988453576","https://openalex.org/W2005811057","https://openalex.org/W2017646967","https://openalex.org/W2018687571","https://openalex.org/W2019586379","https://openalex.org/W2034144210","https://openalex.org/W2056273964","https://openalex.org/W2061901927","https://openalex.org/W2068548071","https://openalex.org/W2083896568","https://openalex.org/W2093160502","https://openalex.org/W2120052965","https://openalex.org/W2121513440","https://openalex.org/W2125564673","https://openalex.org/W2132068130","https://openalex.org/W2132519371","https://openalex.org/W2133800002","https://openalex.org/W2144615061","https://openalex.org/W2146872957","https://openalex.org/W2149327697","https://openalex.org/W2153463096","https://openalex.org/W2155576607","https://openalex.org/W2159919478","https://openalex.org/W2169691657","https://openalex.org/W2198202036","https://openalex.org/W2264112144","https://openalex.org/W2566754591","https://openalex.org/W4231713821","https://openalex.org/W4233238435","https://openalex.org/W4245891287","https://openalex.org/W4285719527","https://openalex.org/W4297808020","https://openalex.org/W6605513912","https://openalex.org/W6605599029","https://openalex.org/W6632204558","https://openalex.org/W6667559009","https://openalex.org/W6679720448","https://openalex.org/W6685176673","https://openalex.org/W6693298501","https://openalex.org/W6731624881","https://openalex.org/W6842890332","https://openalex.org/W6959708992"],"related_works":["https://openalex.org/W2062940763","https://openalex.org/W2937343495","https://openalex.org/W4360833258","https://openalex.org/W3149127250","https://openalex.org/W2158984754","https://openalex.org/W4246764483","https://openalex.org/W2080934634","https://openalex.org/W2081749267","https://openalex.org/W2112083262","https://openalex.org/W2143428259"],"abstract_inverted_index":{"Most":[0],"cyber":[1,41,63],"security":[2],"research":[3],"is":[4],"focused":[5],"on":[6],"detecting":[7],"network":[8,58,69],"intrusions":[9],"or":[10,22],"anomalies":[11],"through":[12,93],"the":[13,46,62,75,94],"use":[14,95],"of":[15,35,51,78,96],"automated":[16],"methods,":[17],"exploratory":[18],"visual":[19,27],"analytics":[20],"systems,":[21],"real-time":[23],"monitoring":[24],"using":[25],"dynamic":[26],"representations.":[28],"However,":[29],"there":[30],"has":[31],"been":[32],"minimal":[33],"investigation":[34],"effective":[36],"decision":[37,53],"support":[38,54],"systems":[39],"for":[40,56,111],"analysts.":[42],"This":[43],"paper":[44],"describes":[45],"user-centered":[47],"design":[48,109,115],"and":[49,70,88,102,114,123],"development":[50],"a":[52,68,79,97,124],"visualization":[55,85],"active":[57],"defense.":[59],"Ocelot":[60],"helps":[61],"analyst":[64],"assess":[65],"threats":[66],"to":[67],"quarantine":[71],"affected":[72],"computers":[73],"from":[74],"healthy":[76],"parts":[77],"network.":[80],"The":[81],"described":[82],"web-based,":[83],"functional":[84],"prototype":[86],"integrates":[87],"visualizes":[89],"multiple":[90],"data":[91],"sources":[92],"hybrid":[98],"space":[99],"partitioning":[100],"tree":[101],"node":[103],"link":[104],"diagram.":[105],"We":[106],"describe":[107],"our":[108],"process":[110],"requirements":[112],"gathering":[113],"feedback":[116],"which":[117],"included":[118],"expert":[119],"interviews,":[120],"iterative":[121],"design,":[122],"user":[125],"study.":[126]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":5}],"updated_date":"2026-05-17T06:04:21.649783","created_date":"2025-10-10T00:00:00"}