Designing visualisation enhancements for SIEM systems

Phong H. Nguyen; Siming Chen; Natalia Andrienko; Michael Kamp; Linara Adilova; Gennady Andrienko; Olivier Thonnard; Alysson Bessani; Cagatay Turkay

Designing visualisation enhancements for SIEM systems

Phong H. Nguyen, Siming Chen, Natalia Andrienko, Michael Kamp, Linara Adilova, Gennady Andrienko, Olivier Thonnard, Alysson Bessani, Cagatay Turkay

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Other

Abstract

DiSIEM is an ongoing EU-funded project that aims to extend exist- ing Security Information and Event Management (SIEM) systems with a set of diversity-related components to improve their capaci- ties. This paper focuses on the scope of visualisation research within DiSIEM and presents the objectives in relation to enhancing the visualisation capability in current SIEM systems, discusses the de- sign approach taken, and reports the initial results from the ongoing visualisation design and development efforts.

Original language	English
Title of host publication	2018 IEEE Symposium on Visualization for Cyber Security (VizSec)
Editors	Celeste Lyn Paul, Jorn Kohlhammer
Place of Publication	Piscataway NJ USA
Publisher	IEEE, Institute of Electrical and Electronics Engineers
Number of pages	2
ISBN (Electronic)	9781538681947
Publication status	Published - 2018
Externally published	Yes
Event	International Workshop on Visualization for Cyber Security 2018 - Berlin, Germany Duration: 22 Oct 2018 → 28 Oct 2018 Conference number: 15th https://vizsec.org/vizsec2018/#cfp

Conference

Conference	International Workshop on Visualization for Cyber Security 2018
Abbreviated title	VizSec 2018
Country/Territory	Germany
City	Berlin
Period	22/10/18 → 28/10/18
Internet address	https://vizsec.org/vizsec2018/#cfp

Cite this

@inproceedings{6df7475f01ba43a79911432a3668f28d,

title = "Designing visualisation enhancements for SIEM systems",

abstract = "DiSIEM is an ongoing EU-funded project that aims to extend exist- ing Security Information and Event Management (SIEM) systems with a set of diversity-related components to improve their capaci- ties. This paper focuses on the scope of visualisation research within DiSIEM and presents the objectives in relation to enhancing the visualisation capability in current SIEM systems, discusses the de- sign approach taken, and reports the initial results from the ongoing visualisation design and development efforts.",

author = "{H. Nguyen}, Phong and Siming Chen and Natalia Andrienko and Michael Kamp and Linara Adilova and Gennady Andrienko and Olivier Thonnard and Alysson Bessani and Cagatay Turkay",

year = "2018",

language = "English",

editor = "{Lyn Paul}, Celeste and Jorn Kohlhammer",

booktitle = "2018 IEEE Symposium on Visualization for Cyber Security (VizSec)",

publisher = "IEEE, Institute of Electrical and Electronics Engineers",

address = "United States of America",

note = "International Workshop on Visualization for Cyber Security 2018, VizSec 2018 ; Conference date: 22-10-2018 Through 28-10-2018",

url = "https://vizsec.org/vizsec2018/#cfp",

}

H. Nguyen, P, Chen, S, Andrienko, N, Kamp, M, Adilova, L, Andrienko, G, Thonnard, O, Bessani, A & Turkay, C 2018, Designing visualisation enhancements for SIEM systems. in C Lyn Paul & J Kohlhammer (eds), 2018 IEEE Symposium on Visualization for Cyber Security (VizSec). IEEE, Institute of Electrical and Electronics Engineers, Piscataway NJ USA, International Workshop on Visualization for Cyber Security 2018, Berlin, Berlin, Germany, 22/10/18.

Designing visualisation enhancements for SIEM systems. / H. Nguyen, Phong; Chen, Siming; Andrienko, Natalia et al.
2018 IEEE Symposium on Visualization for Cyber Security (VizSec). ed. / Celeste Lyn Paul; Jorn Kohlhammer. Piscataway NJ USA: IEEE, Institute of Electrical and Electronics Engineers, 2018.

Research output: Chapter in Book/Report/Conference proceeding › Conference Paper › Other

TY - GEN

T1 - Designing visualisation enhancements for SIEM systems

AU - H. Nguyen, Phong

AU - Chen, Siming

AU - Andrienko, Natalia

AU - Kamp, Michael

AU - Adilova, Linara

AU - Andrienko, Gennady

AU - Thonnard, Olivier

AU - Bessani, Alysson

AU - Turkay, Cagatay

N1 - Conference code: 15th

PY - 2018

Y1 - 2018

N2 - DiSIEM is an ongoing EU-funded project that aims to extend exist- ing Security Information and Event Management (SIEM) systems with a set of diversity-related components to improve their capaci- ties. This paper focuses on the scope of visualisation research within DiSIEM and presents the objectives in relation to enhancing the visualisation capability in current SIEM systems, discusses the de- sign approach taken, and reports the initial results from the ongoing visualisation design and development efforts.

AB - DiSIEM is an ongoing EU-funded project that aims to extend exist- ing Security Information and Event Management (SIEM) systems with a set of diversity-related components to improve their capaci- ties. This paper focuses on the scope of visualisation research within DiSIEM and presents the objectives in relation to enhancing the visualisation capability in current SIEM systems, discusses the de- sign approach taken, and reports the initial results from the ongoing visualisation design and development efforts.

M3 - Conference Paper

BT - 2018 IEEE Symposium on Visualization for Cyber Security (VizSec)

A2 - Lyn Paul, Celeste

A2 - Kohlhammer, Jorn

PB - IEEE, Institute of Electrical and Electronics Engineers

CY - Piscataway NJ USA

T2 - International Workshop on Visualization for Cyber Security 2018

Y2 - 22 October 2018 through 28 October 2018

ER -