Event Details

Data Visualization of Graph-Based Threat Detection System

Presenter: Ilnaz Nikseresht
Supervisor:

Date: Tue, August 24, 2021
Time: 15:00:00 - 16:00:00
Place: Zoom - please see link below

ABSTRACT

Join Zoom Meeting

https://uvic.zoom.us/j/83702178871?pwd=WXhrWVM5aEVmWTBLL3VBS1BNUFU3UT09

Meeting ID: 837 0217 8871

Password: 821636

One tap mobile

+17789072071,,83702178871# Canada

+16475580588,,83702178871# Canada

Dial by your location

        +1 778 907 2071 Canada

        +1 647 558 0588 Canada

Meeting ID: 837 0217 8871

Find your local number: https://uvic.zoom.us/u/kdNPvep2px

Title: Data Visualization of Graph-Based Threat Detection System

Summary:

The Activity and Event Network Model (AEN) is a new security knowledge graph that leverages large dynamic uncertain graph theory to capture and analyze stealthy and long-term attack patterns. Because the graph is expected to become extremely large over time, it can be very challenging for security analysts to navigate it and identify meaningful information. This report presents different visualization layers deployed to improve the graph model’s presentation. The main goal is to build an enhanced visualization system that can more simply and effectively overlay different visualization layers, namely edge/node type, node property, node age, node’s probability of being compromised, and the threat horizon layer. Therefore, with the help of the developed layers, the network security analysts can identify suspicious network security events and activities as soon as possible.