The University of Arizona

Events & News

CS Colloquium

CategoryLecture
DateThursday, September 11, 2014
Time11:00 am
Concludes12:00 pm
LocationGould-Simpson 906
DetailsPlease join us for coffee and light refreshments at 10:45am in the 9th Floor Atrium.

Faculty Host: Stephen Kobourov
SpeakerThienne Johnson & Joe Fowler
TitleResearch Associates
AffiliationDepartment of Computer Science

IMap: Visualizing Network Activity over Internet Maps

We propose a novel visualization, IMap, which enables the detection of security threats by visualizing a large volume of dynamic network data. In IMap, the Internet topology at the Autonomous System (AS) level is represented by a canonical map (which resembles a geographic map of the world), and aggregated IP traffic activity is superimposed in the form of continuously updated heat maps (intensity overlays). Specifically, IMap groups ASes as contiguous regions based on AS attributes (geo-location, type, rank, IP prefix space) and AS relationships. The area, boundary, and relative positions of these groups in the map do not necessarily reflect actual world geography, but are determined by the characteristics of the Internet AS topology. To demonstrate the effectiveness of IMap, we showcase two case studies, a simulated DDoS attack and a real-world worm propagation attack.

Biography

Thienne Johnson is a research associate at the Department of Computer Science and Department of Electrical and Computer Engineering. She has a Ph.D. in Computer Science from the Federal University of Pernambuco (Brazil) and does research in computer networks and anomaly detection.

Joe Fowler is a research associate at the Department of Computer Science. He has a Ph.D. in Computer Science from the University of Arizona and does research in graph drawing, visualization, and computational geometry.