Cybercopters Swarm: Immersive Analytics for Alerts Classification based on Periodic Data - Laboratoire des sciences et techniques de l'information, de la communication et de la connaissance Accéder directement au contenu
Article Dans Une Revue Frontiers in Virtual Reality Année : 2023

Cybercopters Swarm: Immersive Analytics for Alerts Classification based on Periodic Data

Résumé

This paper assesses the usefulness of an interactive and navigable 3D environment to help decision-making in cybersecurity. Malware programs frequently emit periodic signals in network logs. However, normal periodical network activities, such as software updates and data collection activities, mask them. Thus, if automatic systems use periodicity to successfully detect malware, they will also detect ordinary activities as suspicious ones and will raise false positives. Hence, there is a need to provide tools to sort the alerts raised by such software. Data visualizations can make it easier to categorize these alerts, as proven by previous research. However, traditional visualizations tools can struggle to display the large amount of data that needs to be treated in cybersecurity in a clear way. This is why this paper explores the use of Immersive Analytics to interact with complex datasets representations and to collect cues for alert classification. We created a prototype that uses a helical representation to underline periodicity in the distribution of one variable of a dataset. We tested this prototype in an alert triage scenario and compared it with a state of the art 2D visualization with regard to visualizations efficiency, usability, workload and flow induced.
Fichier principal
Vignette du fichier
Frontiers2.pdf (1.15 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04044204 , version 1 (24-03-2023)
hal-04044204 , version 2 (31-03-2023)

Identifiants

Citer

Nicolas Delcombel, Thierry Duval, Marc-Oliver Pahl. Cybercopters Swarm: Immersive Analytics for Alerts Classification based on Periodic Data. Frontiers in Virtual Reality, inPress, ⟨10.3389/frvir.2023.1156656⟩. ⟨hal-04044204v1⟩
67 Consultations
41 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More