Data visualization short v1.1
Upcoming SlideShare
Loading in...5
×
 

Data visualization short v1.1

on

  • 291 views

Survey administered to network security professionals examining their knowledge and uses of data visualizations.

Survey administered to network security professionals examining their knowledge and uses of data visualizations.

Statistics

Views

Total Views
291
Views on SlideShare
212
Embed Views
79

Actions

Likes
0
Downloads
1
Comments
0

4 Embeds 79

http://uxstrategy-aw.blogspot.com 76
http://uxstrategy-aw.blogspot.ca 1
http://uxstrategy-aw.blogspot.sg 1
http://uxstrategy-aw.blogspot.de 1

Accessibility

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

Data visualization short v1.1 Data visualization short v1.1 Presentation Transcript

  • Data Visualization and the Security Professional A study of data visualization knowledge and practices By Adam Winkler January 26, 2012© Copyright 2011 EMC Corporation. All rights reserved. 1
  • Survey Objective• To poll general data visualization knowledge of security professionals within the network security industry• To understand which visualization types security professionals find most and least familiar, interpretable and useful• To use these findings as we evaluate third party data visualization packages for our Security Management suite of products and as we consider development and adoption of new data visualization techniques © Copyright 2011 EMC Corporation. All rights reserved. 2
  • Participants• Total participants: 65 (51 Security Professionals) (Participants were allowed to check off multiple roles)ROLE COUNT PERCENTSecurity Analyst 23 35%Security Engineer 17 26%Security Architect 13 20%Network Analyst 4 7%SOC Manager 1 1%DBA/Device owner 1 1%Product Administrator 4 6%Other (Security Related) 11 17%Non-Security (gen public) 14 21% © Copyright 2011 EMC Corporation. All rights reserved. 3
  • Experience as a Security Professional Yrs at current position50.00%45.00%40.00%35.00%30.00%25.00% Yrs at current position20.00%15.00%10.00%5.00%0.00% < 1 year 1-3 years > 3 years < 11year < year 1-3 years > 3 years © Copyright 2011 EMC Corporation. All rights reserved. 4
  • Industry 30.00% 25.00% 20.00% 15.00% Percent (Security) Percent (Public) 10.00% 5.00% 0.00% Government Financial Health Care High Tech Educational Manufacturing Retail Other (please specify)© Copyright 2011 EMC Corporation. All rights reserved. 5
  • Company Size Percent > 10,000 employees2001-10,000 employees Percent 500-2000 employees <500 employees 0.00% 5.00% 10.00% 15.00% 20.00% 25.00% 30.00% 35.00% 40.00% 45.00% © Copyright 2011 EMC Corporation. All rights reserved. 6
  • When interacting with data during your daily activities, what is most important to you? 80% of security professionals prefer to view summary information first, then drill into the details Lots of detail. Show me all the information right away and let me filter it down Summary information. Show me high level information right away, then let me get to the Public (Percent) details Security (Percent) Other 0 20 40 60 80 100Comments“Let me insert the information I need, then let me get details what did you find (logs, video, files, users and etc)...”“Show me *selected* information, then let me get to the details”“ Post processed visualization of data using filters that artificially exaggerate or minimize based on anomalous patterns” © Copyright 2011 EMC Corporation. All rights reserved. 7
  • How do you prefer data to be presented?75% of security professionals prefer to see a combination of charts and graphs in their data display I prefer a combination of tables, charts and I prefer a combination of tables, charts and graphs graphs I preferprefer charts graphs over tables I charts and and graphs over tables Security (Percent) I prefer tablestables charts and graphs I prefer over over charts and graphs Public (Percent) Other Other 0% 10% 20% 30% 40% 50% 60% 70% 80% Comments “I like any visualization that filters large volumes of unimportant information and makes interesting anomalies or patterns obvious “ © Copyright 2011 EMC Corporation. All rights reserved. 8
  • Visualizations used in this survey• Pie chart • Parallel coordinates• Bar chart • Link graph• Stacked bar chart • Radar chart• Histogram • Sparkline• Line chart • Network map• Area chart • Tree map• Scatter plot • Heat map• Bubble chart • Geo mapNote: See Appendix for visualization illustrations and survey data © Copyright 2011 EMC Corporation. All rights reserved. 9
  • 80% + 60%-79%Our Findings (Security Profs only) < 60%Viz Type Familiarity (%) Interpretation (%) Usefulness (%)Pie chart 100 96 85Bar chart 100 92 94Stacked bar 96 90 82Histogram 96 92 87Line chart 100 96 98Area chart 98 92 75Scatter plot 81 72 79Bubble chart 73 80 65Parallel coordinate 51 72 64Link graph 83 94 91Radar chart 81 76 53Sparkline 62 88 72Network map 83 86 83Tree map 51 56 60Heat map 68 77 80Geo map 98 93 84 © Copyright 2011 EMC Corporation. All rights reserved. 10
  • Visualization type by RankRank Familiarity Rank Interpretation Rank Usefulness1 Pie chart 1 Pie chart 1 Line chart1 Bar chart 1 Line chart 2 Bar chart1 Line chart 3 Link graph 3 Link graph4 Geo Map 4 Geo map 4 Histogram4 Area Map 5 Bar chart 5 Pie chart6 Stacked Bar 5 Histogram 6 Geo map6 Histogram 5 Area map 7 Network map8 Link Graph 8 Stacked bar 8 Stacked bar8 Network Map 9 Sparkline 9 Heat map10 Scatter plot 10 Network map 10 Scatter plot10 Radar chart 11 Bubble chart 11 Area chart12 Bubble chart 12 Heat map 12 Sparkline13 Heat map 13 Radar chart 13 Bubble chart14 Sparkline 13 Scatter plot 14 Parallel Coord’s15 Parallel Coord’s 15 Parallel Coord’s 15 Tree map15 Tree map 16 Tree map 16 Radar chart© Copyright 2011 EMC Corporation. All rights reserved. 11
  • SummaryAmong security professionals familiar with these visualizations:• Pie charts, bar charts, line charts are most familiar types of visualizations• Parallel coordinates, tree maps and sparklines are the least familiar types of visualizations• Line charts are most useful, followed by bar charts, link graphs and histograms• Bubble charts, parallel coordinates, tree maps and radar charts are least useful• Radar charts are the most over-rated, followed by area charts, and pie charts*• Parallel coordinates are the most under-rated, followed by heat maps and link graph** Based upon disparity between familiarity and usefulness © Copyright 2011 EMC Corporation. All rights reserved. 12
  • Appendix© Copyright 2011 EMC Corporation. All rights reserved. 13
  • Visualizations: Pie Chart (1 of 2) How familiar are you with a pie chart? How useful is a pie chart? Ive never seen or used it I’ve never seen or used it before before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting a pie chart? seen or used it before Ive never Not comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding … Very comfortable. I easily understand the data. 0% 50% 100% © Copyright 2011 EMC Corporation. All rights reserved. 14
  • Visualizations: Pie Chart (2 of 2)For what purposes do you currently use a piechart? Other (please specify) I dont use it Real-time event monitoring Network monitoring Incident investigation Security (%) Incoming alerts Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% “Likes” “Dislikes”• I can share this with my team for better understanding • Less details then other charts• Good for a general overview • I prefer count or sum to percents (usually used in pie• Display relative proportions of multiple classes of data charts)• Visually simpler than other types of graphs • Rapid overall view• Easy to present high level overview of data providing • Not enough detailed there are not too many areas • The more data points you have, the less effective a pie chart is • Little context usually, too high level, inability to drill into more meaningful information © Copyright 2011 EMC Corporation. All rights reserved. 15
  • Visualizations: Bar Chart (1 of 2) How familiar are you with a bar chart? How useful is a bar chart? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not usefulI use/have used it on occasion in my day to day operations Somewhat useful I use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% 70% 80% How comfortable are you interpreting a bar 0% 20% 40% 60% 80% chart? seen or used it before Ive never Not comfortable. I don’t understand the data.Somewhat comfortable. I need to spend some time understanding the data. Very comfortable. I easily understand the data. 0% 10%20%30%40%50%60%70%80%90% © Copyright 2011 EMC Corporation. All rights reserved. 16
  • Visualizations: Bar Chart (2 of 2)For what purposes do you currently use a barchart? Security (%) Other (please specify) I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% 60% “Likes” “Dislikes”• Good for high-level data overview • Not usable for huge amounts of data• Can quickly identify where problems lie • If one value is much bigger then the others the chart• it gives the details so easy .. becomes uninformative• Can display more info than pie chart while still being • . They only show data as a total, you cant know the clear behavior of such data like an histogram. • Once there are two things being shown per bar with different colors, it starts to get confusing though © Copyright 2011 EMC Corporation. All rights reserved. 17
  • Visualizations: Stacked Bar Chart How familiar are you with a stacked bar How useful is a x? chart? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my Very useful day to day operations 0% 10% 20% 30% 40% 50% 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting a stacked bar chart? Ive never seen or used it before Not comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding the…Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% 60% 70% © Copyright 2011 EMC Corporation. All rights reserved. 18
  • Visualizations: Stacked Bar ChartFor what purposes do you currently use a stacked barchart? Security (%) Other (please specify) I dont use itReal-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% “Likes” “Dislikes” • The stacked bar chart is the lowest level of useful visualization in any security context • I dont love these. • They can be confusing for those unfamiliar with their use. They also make comparing some mid-column values difficult. • Only values next to axis can be compared easily© Copyright 2011 EMC Corporation. All rights reserved. 19
  • Visualizations: Histogram (1 of 2) How familiar are you with a histogram? How useful is a histogram? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 0% 20% 40% 60% 80% How comfortable are you interpreting a histogram? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10%20%30%40%50%60%70%80% © Copyright 2011 EMC Corporation. All rights reserved. 20
  • Visualizations: Histogram(2 of 2)For what purposes do you currently use a x? Security (%) Other (please specify) I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% “Likes” “Dislikes”• Useful to see the picture for a period of time • Does not allow comparisons very easily• Useful for showing trends when dealing with a large • Useful for one variable only amount of data• Its very useful in determining what data has reached a peak in a given time• best diagram ever, all the information available in one graph. © Copyright 2011 EMC Corporation. All rights reserved. 21
  • Visualizations: Line Chart (1 of 2) How familiar are you with a line chart? How useful is a line chart?I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not usefulI use/have used it on occasion in my day to day operations Somewhat useful I use/have used it all the time in my day to day operations Very useful 0% 20% 40% 60% 80% 100% How comfortable are you interpreting a line 0% 20% 40% 60% 80% 100% chart? Ive never seen or used it before Not comfortable. I don’t understand the data. Somewhat comfortable. I need tospend some time understanding… Very comfortable. I easily understand the data. 0% 20% 40% 60% 80% 100% © Copyright 2011 EMC Corporation. All rights reserved. 22
  • Visualizations: Line Chart (2 of 2)For what purposes do you currently use a linechart? Security (%) Other (please specify) I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% “Likes” “Dislikes”• Useful to see the picture for a period of time • If there are too many lines, you have to keep looking• Ideal to show trends at the key• I use them when projecting future data • Limited number of variables.• Its similar to the histogram. Very useful. © Copyright 2011 EMC Corporation. All rights reserved. 23
  • Visualizations: Area Chart (1 of 2) How familiar are you with an area How useful is an area chart? chart? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting an area 0% 10% 20% 30% 40% 50% 60% chart? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 20% 40% 60% 80% © Copyright 2011 EMC Corporation. All rights reserved. 24
  • Visualizations: Area Chart (2 of 2)For what purposes do you currently use an areachart? Security (%) I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% 60% “Likes” “Dislikes”• Creates easy reference of relational change over time • Not as useful as the line char• Better than stacked bar for seeing trends in each • Very limited usage variable • Often confusing and more difficult to interpret • They are often ambiguous to read and not well labeled • Meh... © Copyright 2011 EMC Corporation. All rights reserved. 25
  • Visualizations: Scatter Plot (1 of 2) How familiar are you with a scatter How useful is a scatter plot? plot? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% 0% 20% 40% 60% 80% 100% How comfortable are you interpreting a scatter plot? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% 60% 70% © Copyright 2011 EMC Corporation. All rights reserved. 26
  • Visualizations: Scatter Plot (2 of 2)For what purposes do you currently use a scatterplot? Security (%) “Finally we get into truly useful Other (please specify) visualization, were we can see I dont use it patterns emerging from the data. This Real-time event monitoring is where security visualization Network monitoring Incident investigation lies, being able to easily perceive and Incoming alerts Security (%) explore patterns in the data.” Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 20% 40% 60% 80% “Likes” “Dislikes”• Can see the distribution of events here • can be difficult for people to interpret• A lot of information - mostly overview can be displayed • Results may not be clear• Does show a lot of information, but users generally like • Very limited usage it less. Great to show trends. • Almost always a bad idea• Great to spot outliers • At first glance it looks confusing, maybe easier to understand with less clusters © Copyright 2011 EMC Corporation. All rights reserved. 27
  • Visualizations: Bubble Chart (1 of 2) How familiar are you with a bubble How useful is a bubble chart? chart? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting a bubble 0% 20% 40% 60% 80% chart? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding … Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% 60% © Copyright 2011 EMC Corporation. All rights reserved. 28
  • Visualizations: Bubble Chart (2 of 2)For what purposes do you currently use a bubblechart? Security (%) Other (please specify) I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 20% 40% 60% 80% “Likes” “Dislikes”• Great for spotting outliers • Not much better than a scatter chart• I like the very high density of information • can get cluttered• Fantastic graph type, if done well. © Copyright 2011 EMC Corporation. All rights reserved. 29
  • Visualization: Parallel Coordinates How familiar are you with a parallel How useful are parallel coord’s? coord’s? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting parallel 0% 10% 20% 30% 40% 50% coord’s? Ive never seen or used it before Not comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding … Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% 60% © Copyright 2011 EMC Corporation. All rights reserved. 30
  • Visualization: Parallel CoordinatesFor what purposes do you currently use parallel coord’s? Security (%) “…the relationships between Other (please specify) I dont use it disparate pieces of data become Real-time event monitoring clear, new information is Network monitoring contexted out of the data, and the Incident investigation visualization serves an actual Incoming alerts Security (%) Device monitoring purpose, instead of being a Daily/weekly reports that I… hindrance.” Daily/weekly reports that I… 0% 20% 40% 60% 80% “Likes” “Dislikes”• Can see a high level overview on loads of different data • Can be somewhat complicated• Useful to demonstrate ranking on different elements. • A bit more complex for users that are less familiar with• Looks like an interesting way to display data. could be it. good for showing access to sensitive data • Looks confusing, I would need someone to explain it • This one seems like it would be a lot of work. Like its showing something complicated • That would take some detailed explanation to grasp the meaning © Copyright 2011 EMC Corporation. All rights reserved. 31
  • Visualizations: Link Graph (1 of 2) How familiar are you with a link graph? How useful is a link graph? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not usefulI use/have used it on occasion in my day to day operations Somewhat useful I use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting a link 0% 20% 40% 60% 80% graph?seen or used it before Ive never Not comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10%20%30%40%50%60%70%80% © Copyright 2011 EMC Corporation. All rights reserved. 32
  • Visualizations: Link Graph (2 of 2)For what purposes do you currently use a linkgraph? Security (%) Other I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% 60% “Likes” “Dislikes”• Great for workflows and network mapping • the Parallel Coordinates are much better• good for showing relationships between entities • can get very cluttered © Copyright 2011 EMC Corporation. All rights reserved. 33
  • Visualizations: Radar Chart (1 of 2) How familiar are you with a radar How useful is a radar chart? chart?I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not usefulI use/have used it on occasion in my day to day operations Somewhat useful I use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting a radar 0% 10% 20% 30% 40% 50% chart? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% 60% © Copyright 2011 EMC Corporation. All rights reserved. 34
  • Visualizations: Radar Chart (2 of 2)For what purposes do you currently use a radarchart? Security (%) Other I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 20% 40% 60% 80% 100% “Likes” “Dislikes”• I like these. Good for showing the weight of certain • Would need someone to explain it aspects in comparison to each other. • limited by the number of axes that can be realistically displayed at one. Essentially just a different way of doing a stacked bar chart • They are only useful for very specific data types. • Not very intuitive © Copyright 2011 EMC Corporation. All rights reserved. 35
  • Visualizations: Spark Line (1 of 2) How familiar are you with a spark line? How useful is a spark line? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% How comfortable are you interpreting a spark 0% 10% 20% 30% 40% 50% line? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% © Copyright 2011 EMC Corporation. All rights reserved. 36
  • Visualizations: Spark line (2 of 2)For what purposes do you currently use a spark line? Security (%) I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 20% 40% 60% 80% 100% “Likes” “Dislikes”• Trend data reduced to its simplest form • Looks like 4 bar charts to me• Great for overviews when not much detail is required. © Copyright 2011 EMC Corporation. All rights reserved. 37
  • Visualizations: Network Map (1 of 2) How familiar are you with a network How useful is a network map? map? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat useful I use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% How comfortable are you interpreting a network 0% 10% 20% 30% 40% 50% 60% 70% map? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% 60% 70% © Copyright 2011 EMC Corporation. All rights reserved. 38
  • Visualizations: Network Map (2 of 2)For what purposes do you currently use a networkmap? Security (%) Other I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% “Likes” “Dislikes”• Very clear representation of network • Not used by many vendors• Great for showing relationships between entities - much • Can become very cluttered. Lists are sometimes more like the link graph. useful. • Can quickly get very messy and confusing until filtered © Copyright 2011 EMC Corporation. All rights reserved. 39
  • Visualizations: Tree Map (1 of 2) How familiar are you with a tree map? How useful is a tree map? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% 60% How comfortable are you interpreting a tree 0% 10% 20% 30% 40% 50% map? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% © Copyright 2011 EMC Corporation. All rights reserved. 40
  • Visualizations: Tree Map (2 of 2)For what purposes do you currently use a tree map? Security (%) Other I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 20% 40% 60% 80% 100% “Likes” “Dislikes”• Easily observe hierarchical groupings as the viewer • Very limited usage needs to perceive them, in the same visualization, is • Details not visible where tree graphs rule • Not usable in small space• Can show hierarchies nicely • looks confusing • I have a hard time making sense of it. Too much info at once. © Copyright 2011 EMC Corporation. All rights reserved. 41
  • Visualizations: Heat Map (1 of 2) How familiar are you with a heat map? How useful is a heat map? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% How comfortable are you interpreting a heat 0% 10% 20% 30% 40% map? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding… Very comfortable. I easily understand the data. 0% 10% 20% 30% 40% 50% © Copyright 2011 EMC Corporation. All rights reserved. 42
  • Visualizations: Heat Map (2 of 2)For what purposes do you currently use a heat map? Security (%) Other I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 200% 400% 600% 800% “Likes” “Dislikes”• One of the best at a glance visualizations, for • Needs a lot of space demonstrating relations between individual quantities • Would need someone to explain it and allow perception of patterns over time • Looks too complicated.• Simple and easy visualization © Copyright 2011 EMC Corporation. All rights reserved. 43
  • Visualizations: Geo Map(1 of 2) How familiar are you with a geo map? How useful is a geo map? I’ve never seen or used it before Ive never seen or used it before I’ve seen it but I don’t use it Not useful I use/have used it on occasion in my day to day operations Somewhat usefulI use/have used it all the time in my day to day operations Very useful 0% 10% 20% 30% 40% 50% How comfortable are you interpreting a geo 0% 20% 40% 60% 80% 100% map? Ive never seen or used it beforeNot comfortable. I don’t understand the data. Somewhat comfortable. I need to spend some time understanding … Very comfortable. I easily understand the data. 0% 20% 40% 60% 80% 100% © Copyright 2011 EMC Corporation. All rights reserved. 44
  • Visualizations: Geo Map (2 of 2)For what purposes do you currently use a geo? Security (%) Other I dont use it Real-time event monitoring Network monitoring Incident investigation Incoming alerts Security (%) Device monitoring Daily/weekly reports that I… Daily/weekly reports that I… 0% 10% 20% 30% 40% 50% 60% 70% “Likes” “Dislikes”• A clear location of certain data can be visualized • 1) Not useful if 1 data center is used• great for showing to non IT people - i.e. Management • Useful for large deployed systems. Less useful for systems that are localized even if they are complex. • There can be challenges getting enough of the useful information into the hover-bubble © Copyright 2011 EMC Corporation. All rights reserved. 45
  • THANK YOU© Copyright 2011 EMC Corporation. All rights reserved. 46