DNS Firewall Data Visualization

Warning

This publication doesn't include Faculty of Arts. It includes Institute of Computer Science. Official publication website can be found on muni.cz.

Authors	ŠPAČEK Stanislav RUSŇÁK Vít DOMBAJOVÁ Anna-Marie
Year of publication	2019
Type	Article in Proceedings
Conference	2019 IFIP/IEEE Symposium on Integrated Network and Service Management (IM)
MU Faculty or unit	Institute of Computer Science
Citation
web	https://ieeexplore.ieee.org/abstract/document/8717834
Keywords	Firewall; DNS Response Policy Zones; Visualization
Attached files	2019-IM-DNS-Firewall-Data-Visualization-paper.pdf 2019-IM-DNS-Firewall-Data-Visualization-presentation.pdf
Description	Common security tools generate a lot of data suitable for further analysis. However, the raw form of the data is often too complex and useful information gets lost in a large volume of records. In this paper, we propose a system for visualization of the data generated by a DNS firewall and outline a process of visually emphasizing information important to incident handlers. Our prototype suggests that such visualization is possible, keeping the balance between the amount of displayed information and the level of detail.
Related projects:	Research of Tools for Cyber Situational Awareness and Decision Support of CSIRT Teams in Protection of Critical Infrastructure Critical Infrastructure Software Architectures, Computer Systems Security, Data Processing and Visualization Techniques, and Augmented Reality