NViZ: An Interactive Visualization of Network Security Systems Logs

Abstract

We describe NViZ a graphical visualization tool developed to visualize log data generated by network security devices and services like firewall, intrusion detection system and domain name system. It can generate interactive visualization graphs identifying popular websites visited, active users, DNS query patterns, IDS alert types and their distribution and also peer network connections of infected and non-infected machines.