| With the rapid development of network technology, the network security issues are growing. The traditional text based network security analysis technique has following characteristics:heavy cognitive burden, poor man-machine interaction ability, unable to grasp the understanding of the global network ability and futility when is facing a large amount of data.Network security visualization comes from information visualization and is a new field of information visualization. Network data can be displayed as graphics when using network security visualization, at the same time network analysts can interactive with the graphics. This approachcan reduce cognitive burden significantly. The analysts can find potential security threat more quickly and conveniently through the graphics. Because the visualization graphics can be operated in real time in sometimes, network analysts can advance the conduct of the defense.The content of this thesis comes from China Education and Research Computer Network.This project is intended to provide visualization functions for Application Inspection System.The main contributions of this thesis are as follows:1. Design and realize multi-views for existing Application Inspection System.2. Design a group of more generic formatted data which is visual structure independent. This formatted data and the combination of this formatted data can be used to realize new visual structure.3. Bidirectional level Sankey structure is used to show the interactions between ip addresses as well as data information. The analyst can grasp the overall situation of network traffic through this visual structure. |
PDF Full Text Request