Intrusion and misuse detection in large-scale systems

Abstract

Attacks and misuses of computer systems are major concerns in today's network-based world. With the growing concern with regard to cyberterrorism there is a need for new tools and techniques to monitor networks and systems for intrusions and misuse. The goal must be to identify an attack before an organization incurs damage, loses information (theft or otherwise), or has its integrity impugned. With today's network-based economic resources, a successful attack will negatively impact consumer confidence and decrease consumers' willingness to make electronic purchases. The authors present information visualization techniques based on a glyph metaphor for visually representing textual log information.