{"id":"https://openalex.org/W2055416592","doi":"https://doi.org/10.1145/1641587.1641590","title":"Visual support for analyzing network traffic and intrusion detection events using TreeMap and graph representations","display_name":"Visual support for analyzing network traffic and intrusion detection events using TreeMap and graph representations","publication_year":2009,"publication_date":"2009-11-07","ids":{"openalex":"https://openalex.org/W2055416592","doi":"https://doi.org/10.1145/1641587.1641590","mag":"2055416592"},"language":"en","primary_location":{"id":"doi:10.1145/1641587.1641590","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1641587.1641590","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://kops.uni-konstanz.de/server/api/core/bitstreams/d0a54b20-68dc-4bb6-9c65-26b733296458/content","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076733321","display_name":"Florian Mansmann","orcid":null},"institutions":[{"id":"https://openalex.org/I189712700","display_name":"University of Konstanz","ror":"https://ror.org/0546hnb39","country_code":"DE","type":"education","lineage":["https://openalex.org/I189712700"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Florian Mansmann","raw_affiliation_strings":["University of Konstanz, Konstanz, Germany","University of Konstanz, Konstanz , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Konstanz, Konstanz, Germany","institution_ids":["https://openalex.org/I189712700"]},{"raw_affiliation_string":"University of Konstanz, Konstanz , Germany","institution_ids":["https://openalex.org/I189712700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002279044","display_name":"Fabian Fischer","orcid":"https://orcid.org/0009-0003-1761-2601"},"institutions":[{"id":"https://openalex.org/I189712700","display_name":"University of Konstanz","ror":"https://ror.org/0546hnb39","country_code":"DE","type":"education","lineage":["https://openalex.org/I189712700"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Fabian Fischer","raw_affiliation_strings":["University of Konstanz, Konstanz, Germany","University of Konstanz, Konstanz , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Konstanz, Konstanz, Germany","institution_ids":["https://openalex.org/I189712700"]},{"raw_affiliation_string":"University of Konstanz, Konstanz , Germany","institution_ids":["https://openalex.org/I189712700"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073919282","display_name":"Daniel A. Keim","orcid":"https://orcid.org/0000-0001-7966-9740"},"institutions":[{"id":"https://openalex.org/I189712700","display_name":"University of Konstanz","ror":"https://ror.org/0546hnb39","country_code":"DE","type":"education","lineage":["https://openalex.org/I189712700"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daniel A. Keim","raw_affiliation_strings":["University of Konstanz, Konstanz, Germany","University of Konstanz, Konstanz , Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Konstanz, Konstanz, Germany","institution_ids":["https://openalex.org/I189712700"]},{"raw_affiliation_string":"University of Konstanz, Konstanz , Germany","institution_ids":["https://openalex.org/I189712700"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033953993","display_name":"Stephen C. North","orcid":"https://orcid.org/0000-0002-1087-1577"},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen C. North","raw_affiliation_strings":["AT&T Research, Florham Park, NJ","AT&T Research, Florham Park, NJ#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Research, Florham Park, NJ","institution_ids":["https://openalex.org/I1283103587"]},{"raw_affiliation_string":"AT&T Research, Florham Park, NJ#TAB#","institution_ids":["https://openalex.org/I1283103587"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.4359,"has_fulltext":true,"cited_by_count":55,"citation_normalized_percentile":{"value":0.97567814,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"19","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9919999837875366,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12720","display_name":"Multimedia Communication and Technology","score":0.9365000128746033,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8400329351425171},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7446481585502625},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.6523521542549133},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5201278328895569},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.5162844061851501},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.49837303161621094},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4855024814605713},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.48083600401878357},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.4597390592098236},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.45449745655059814},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.4423765242099762},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3876747488975525},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.33673158288002014},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.27927955985069275},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.253853440284729},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2071111798286438},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.1282198131084442}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8400329351425171},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7446481585502625},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.6523521542549133},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5201278328895569},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.5162844061851501},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.49837303161621094},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4855024814605713},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.48083600401878357},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.4597390592098236},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.45449745655059814},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.4423765242099762},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3876747488975525},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.33673158288002014},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.27927955985069275},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.253853440284729},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2071111798286438},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.1282198131084442},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1641587.1641590","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1641587.1641590","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology","raw_type":"proceedings-article"},{"id":"pmh:oai:kops.uni-konstanz.de:123456789/14805","is_oa":true,"landing_page_url":"http://nbn-resolving.de/urn:nbn:de:bsz:352-148050","pdf_url":"https://kops.uni-konstanz.de/server/api/core/bitstreams/d0a54b20-68dc-4bb6-9c65-26b733296458/content","source":{"id":"https://openalex.org/S4306401487","display_name":"KOPS (University of Konstanz)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I189712700","host_organization_name":"University of Konstanz","host_organization_lineage":["https://openalex.org/I189712700"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology - CHiMiT '09. New York, New York, USA: ACM Press, 2009, S. 19-28. ISBN 978-1-60558-572-7. Verf\u00fcgbar unter: doi: 10.1145/1641587.1641590","raw_type":"doc-type:conferenceObject"}],"best_oa_location":{"id":"pmh:oai:kops.uni-konstanz.de:123456789/14805","is_oa":true,"landing_page_url":"http://nbn-resolving.de/urn:nbn:de:bsz:352-148050","pdf_url":"https://kops.uni-konstanz.de/server/api/core/bitstreams/d0a54b20-68dc-4bb6-9c65-26b733296458/content","source":{"id":"https://openalex.org/S4306401487","display_name":"KOPS (University of Konstanz)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I189712700","host_organization_name":"University of Konstanz","host_organization_lineage":["https://openalex.org/I189712700"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the Symposium on Computer Human Interaction for the Management of Information Technology - CHiMiT '09. New York, New York, USA: ACM Press, 2009, S. 19-28. ISBN 978-1-60558-572-7. Verf\u00fcgbar unter: doi: 10.1145/1641587.1641590","raw_type":"doc-type:conferenceObject"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6299999952316284}],"awards":[],"funders":[{"id":"https://openalex.org/F4320326505","display_name":"Universit\u00e4t Konstanz","ror":"https://ror.org/0546hnb39"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2055416592.pdf","grobid_xml":"https://content.openalex.org/works/W2055416592.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W188275245","https://openalex.org/W1519489167","https://openalex.org/W1542248099","https://openalex.org/W1572876171","https://openalex.org/W1775772884","https://openalex.org/W1842847600","https://openalex.org/W1865994522","https://openalex.org/W1962340579","https://openalex.org/W2005811057","https://openalex.org/W2018992824","https://openalex.org/W2093028961","https://openalex.org/W2102671922","https://openalex.org/W2103049871","https://openalex.org/W2106588364","https://openalex.org/W2122315991","https://openalex.org/W2144006900","https://openalex.org/W2144261930","https://openalex.org/W2144615061","https://openalex.org/W2145640629","https://openalex.org/W2165741325","https://openalex.org/W2350778671","https://openalex.org/W4206278179","https://openalex.org/W6632653372","https://openalex.org/W6675991805"],"related_works":["https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W2035643924","https://openalex.org/W3157271777","https://openalex.org/W2377372927"],"abstract_inverted_index":{"Network":[0],"security":[1],"depends":[2],"heavily":[3],"on":[4],"automated":[5],"Intrusion":[6],"Detection":[7],"Systems":[8],"(IDS)":[9],"to":[10,38,88,106],"sense":[11],"malicious":[12],"activity.":[13],"Unfortunately,":[14],"IDS":[15,42],"often":[16],"deliver":[17],"both":[18],"too":[19],"much":[20],"raw":[21],"information,":[22],"and":[23,80,120],"an":[24],"incomplete":[25],"local":[26,66],"picture,":[27],"impeding":[28],"accurate":[29],"assessment":[30],"of":[31,41,49,56,65,92,103],"emerging":[32],"threats.":[33],"We":[34],"propose":[35],"a":[36,62,81,85,112,117],"system":[37],"support":[39],"analysis":[40],"logs,":[43],"that":[44,127],"visually":[45],"pivots":[46],"large":[47],"sets":[48],"Net-Flows.":[50],"In":[51],"particular,":[52],"two":[53],"visual":[54],"representations":[55],"the":[57,77,90,93,101],"flow":[58],"data":[59],"are":[60,70],"compared:":[61],"TreeMap":[63],"visualization":[64],"network":[67,126],"hosts,":[68,79],"which":[69],"linked":[71],"through":[72],"hierarchical":[73],"edge":[74],"bundles":[75],"with":[76,129],"external":[78,131],"graph":[82],"representation":[83],"using":[84],"force-directed":[86],"layout":[87],"visualize":[89],"structure":[91],"host":[94],"communication":[95],"patterns.":[96],"Three":[97],"case":[98],"studies":[99],"demonstrate":[100],"capabilities":[102],"our":[104,125],"tool":[105],"1)":[107],"analyze":[108],"service":[109],"usage":[110],"in":[111,124],"managed":[113],"network,":[114],"2)":[115],"detect":[116],"distributed":[118],"attack,":[119],"3)":[121],"investigate":[122],"hosts":[123],"communicate":[128],"suspect":[130],"IPs.":[132]},"counts_by_year":[{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":4},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":7},{"year":2012,"cited_by_count":8}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}