Information Visualization for Intrusion Detection

The purpose of this study is use an understanding of how information security experts do the work of intrusion detection to inform the design and evaluation of information visualization tools to support intrusion detection analysis.

Network and systems administrators, and related security specialists, daily face the daunting task of protecting their systems from hackers. To do so, they rely on a host of tools to help them sift through immense real-time and logged data streams -- a profoundly complex information environment. These tools have known, severe usability concerns and are in desperate need for radical redesign. To do so, this ongoing ISRC project is examining both security specialist behavior and cutting edge information visualization techniques to inform the design of an optimal socio-technical solution. REU participant involvement will focus on the evaluation, both lab and field based, of the visualization prototype, and may also include aspects of the social study, analyzing survey results, or prototype development, depending on the needs of the project.

Strong communication and interpersonal skills required. Experience conducting interviews and/or usability studies is encouraged. Programming skills, especially in Java, also a plus.