SIFT researchers to present work at security workshop

released October 19, 2004

The 2004 Workshop on Visualization and Data Mining for Computer Security (VizSEC/DMSEC 2004) will be held on Oct. 29 at George Mason University in Fairfax, Virginia. The workshop will be held in conjunction with the 11th ACM Conference on Computer and Communications Security.

Information about security on large and complex computer networks is high volume, heterogeneous, distributed, and dynamic over time. This workshop will focus on two complementary methods to process high-dimensional data into knowledge: visualization and data mining. Visualization represents high-dimension security data in 2D/3D graphics and animations intended to facilitate quick inferences for situational awareness and focusing of attention on potential security events. Data mining focuses on algorithms to accurately detect patterns in high-dimension security data representing unauthorized system access or computer network attacks.

NCSA senior systems security engineer Bill Yurcik is one of the program chairs for the workshop (along with Carla Brodley of Purdue, Philip Chan of Florida Tech, and Richard Lippmann of MIT). The program committee includes several members of NCSA's Security Incident Fusion Tools research group, including Cristina Abad, Ratna Bearavolu, Rafael Bonilla, Kiran Lakkaraju, Yifan Li, Adam Slagell, Jun Wang, and Xiaoxin Yin.

Several ongoing NCSA security projects will be presented at the workshop, including:

• VisFlowConnect: NetFlow Visualizations of Link Relationships for Security Situational Awareness by Xiaoxin Yin, William Yurcik, Michael Treaster, Yifan Li, and Kiran Lakkaraju
• NVisionIP: NetFlow Visualizations of System State for Security Situational Awareness by Kiran Lakkaraju, William Yurcik, Adam Lee, Ratna Bearavolu, Yifan Li, Xiaoxin Yin
• NVisionCC: A Visualization Framework for High Performance Cluster Security by William Yurcik, Xin Meng, and Nadir Kiyanclar

The SIFT group has received funding from the Technology Research, Education and Commercialization Center (TRECC), a program of the University of Illinois that is administered by NCSA and funded by the Office of Naval Research (ONR), and from the National Center for Advanced Secure Systems Research (NCASSR), which is led by NCSA and also funded by ONR.

For more information on the workshop, go to http://www.cs.fit.edu/~pkc/vizdmsec04/.

 

Briefs Archive