TIVIT Interactive: Log Visualization

WEBINAARILog Visualization Marko Niiranen Stonesoft Oyj

Motivation• Huge amounts of logs from network devices (millions entries per day)• Difficult to see the big picture• Impossible to see minor anomalies• No tools for understanding the data

Statistics• Can give small hints about the big picture• Hide minor changes and anomalies• Ignores relations between players

One possible solution: Visualization• Easy to understand by human• Compresses a huge amount of information• Allows interactive manipulation• Enables instant drill-in back to logs• Emotionally attaching

Example 1: Audit

Example 2: Service Access

Example 3: Application Usage by User

Instant Filtering

Drill-in back to Logs

Next steps• Polishing of current features – They will be released in 2012 as a part of StoneGate SMC product• Possible visualization experiments in future: – 3D – Embedded statistics – Animations – Better focus/highlight• Other possible enhancements in future: – Scalability – Automation – More visualization types – More information sources – …

Thank You! Marko Niiranen Stonesoft Oyj

TIVIT Interactive: Log Visualization

by TIVIT on Oct 05, 2011

Accessibility

Categories

Upload Details

Usage Rights

Statistics

TIVIT Interactive: Log Visualization Presentation Transcript