Security data visualization : graphical techniques for network analysis

## concluSion inDex a C k n o w l e D g m e n t s As with any large undertaking, there are many people who helped make this book possible. Too many people have helped contribute to this work to attempt to list them all and risk the chance of missing someone, so I will simply say thanks to the ACM, Black Hat, DEFCON, Georgia Tech, IEEE, Interz0ne, VizSEC, and West Point communities. However, I would like to single out Raffy Marty for contributing two excellent chapters to the book and John Goodall for serving as technical reviewer. Raffy and John are the best people on the planet to have filled those roles, and I owe each a debt of gratitude. Of course, any errors or shortcomings in the text are purely my own. The good people at No Starch Press have been a pleasure to work with. I'd especially like to thank Bill Pollock for his passion to create great books, Tyler Ortman, for guiding the project from inception to completion, Christina Samuell and Megan Dunchak for their savvy editing, and Riley Hoffman for her awesome graphic design work. My thanks goes out as well to Ellen Har, Leigh Poehler, and Patricia Witkin for handling the sundry other details required to publish a book. Information overload. If you're responsible for maintaining your network's security, you're living with it every day. Logs, alerts, packet captures, and even binary files take time and effort to analyze using text-based tools - and once your analysis is complete, the picture isn't always clear, or timely. And time is of the essence. Information visualization is a branch of computer science concerned with modeling complex data using interactive images. When applied to network data, these interactive graphics allow administrators to quickly analyze, understand, and respond to emerging threats and vulnerabilities. Security Data Visualization is a well-researched and richly illustrated introduction to the field. Greg Conti, creator of the network and security visualization tool RUMINT, shows you how to graph and display network data using a variety of tools so that you can understand complex datasets at a glance. And once you've seen what a network attack looks like, you'll have a better understanding of its low-level behavior - like how vulnerabilities are exploited and how worms and viruses propagate. You'll learn how to use visualizationtechniques "Information visualization is a branch of computer science concerned with modeling complex data using interactive images. When applied to network data, these interactive graphics allow administrators to quickly analyze, understand, and respond to emerging threats and vulnerabilities." "Security Data Visualization is a researched and illustrated introduction to the field. Greg Conti, creator of the network and security visualization tool RUMINT, shows you how to graph and display network data using a variety of tools so that you can understand complex datasets at a glance. And once you've seen what a network attack looks like, you'll have a better understanding of its low-level behavior - like how vulnerabilities are exploited and how worms and viruses propagate."--Jacket An introduction to a range of cyber security issues explains how to utilize graphical approaches to displaying and understanding computer security data, such as network traffic, server logs, and executable files.

in This Handbook, The Author Creates Graphical Windows Into The World Of Computer Security Data, Revealing Fascinating And Useful Insights Into Networking, Cryptography, And File Structures.