InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks

Kodituwakku, Hansaka Angel Dias Edirisinghe; Keller, Alex; Gregor, Jens

doi:10.3390/electronics9101747

Open AccessArticle

InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks

by

Hansaka Angel Dias Edirisinghe Kodituwakku

^1,*

,

Alex Keller

² and

Jens Gregor

¹

Department of Electrical Engineering and Computer Science, The University of Tennessee, 1520 Middle Dr, Knoxville, TN 37996, USA

²

School of Engineering, Stanford University, 450 Serra Mall, Stanford, CA 94305, USA

^*

Author to whom correspondence should be addressed.

Electronics 2020, 9(10), 1747; https://doi.org/10.3390/electronics9101747

Submission received: 16 September 2020 / Revised: 2 October 2020 / Accepted: 13 October 2020 / Published: 21 October 2020

(This article belongs to the Special Issue Advanced Cybersecurity Services Design)

Download

Browse Figures

Versions Notes

Abstract

The complexity and throughput of computer networks are rapidly increasing as a result of the proliferation of interconnected devices, data-driven applications, and remote working. Providing situational awareness for computer networks requires monitoring and analysis of network data to understand normal activity and identify abnormal activity. A scalable platform to process and visualize data in real time for large-scale networks enables security analysts and researchers to not only monitor and study network flow data but also experiment and develop novel analytics. In this paper, we introduce InSight2, an open-source platform for manipulating both streaming and archived network flow data in real time that aims to address the issues of existing solutions such as scalability, extendability, and flexibility. Case-studies are provided that demonstrate applications in monitoring network activity, identifying network attacks and compromised hosts and anomaly detection.

Keywords: visual analytics; cybersecurity awareness; incident response; anomaly detection

Share and Cite

MDPI and ACS Style

Kodituwakku, H.A.D.E.; Keller, A.; Gregor, J. InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks. Electronics 2020, 9, 1747. https://doi.org/10.3390/electronics9101747

AMA Style

Kodituwakku HADE, Keller A, Gregor J. InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks. Electronics. 2020; 9(10):1747. https://doi.org/10.3390/electronics9101747

Chicago/Turabian Style

Kodituwakku, Hansaka Angel Dias Edirisinghe, Alex Keller, and Jens Gregor. 2020. "InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks" Electronics 9, no. 10: 1747. https://doi.org/10.3390/electronics9101747

APA Style

Kodituwakku, H. A. D. E., Keller, A., & Gregor, J. (2020). InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks. Electronics, 9(10), 1747. https://doi.org/10.3390/electronics9101747

Note that from the first issue of 2016, this journal uses article numbers instead of page numbers. See further details here.

Article Menu

InSight2: A Modular Visual Analysis Platform for Network Situational Awareness in Large-Scale Networks

Abstract

Share and Cite

Article Metrics

Article Access Statistics

Further Information

Guidelines

MDPI Initiatives

Follow MDPI