UHLÁR, Juraj, Martin HOLKOVIČ and Vít RUSŇÁK. PCAPFunnel: A Tool for Rapid Exploration of Packet Capture Files. Online. In 2021 25th International Conference Information Visualisation (IV). United States of America: The Institute of Electrical and Electronics Engineers, Inc., 2021, p. 69-76. ISBN 978-1-6654-3827-8. Available from: https://dx.doi.org/10.1109/IV53921.2021.00021.
Other formats:   BibTeX LaTeX RIS
Basic information
Original name PCAPFunnel: A Tool for Rapid Exploration of Packet Capture Files
Authors UHLÁR, Juraj (703 Slovakia), Martin HOLKOVIČ (703 Slovakia) and Vít RUSŇÁK (203 Czech Republic, guarantor, belonging to the institution).
Edition United States of America, 2021 25th International Conference Information Visualisation (IV), p. 69-76, 8 pp. 2021.
Publisher The Institute of Electrical and Electronics Engineers, Inc.
Other information
Original language English
Type of outcome Proceedings paper
Country of publisher United States of America
Confidentiality degree is not subject to a state or trade secret
Publication form electronic version available online
WWW URL
RIV identification code RIV/00216224:14610/21:00121642
Organization Ústav výpočetní techniky – Repository – Repository
ISBN 978-1-6654-3827-8
ISSN 1093-9547
Doi http://dx.doi.org/10.1109/IV53921.2021.00021
UT WoS 000850000500011
Keywords (in Czech) Datová analýza; vizualizace dat; analýza síťového provozu; záchyty paketů
Keywords in English Data analysis; Data visualization; Network traffic analysis; Packet captures
Links EF16_019/0000822, research and development project.
Changed by Changed by: RNDr. Daniel Jakubík, učo 139797. Changed: 31/3/2023 04:06.
Abstract
Analyzing network traffic is one of the fundamental tasks in both network operations and security incident analysis. Despite the immense efforts in workflow automation, an ample portion of the work still relies on manual data exploration and analytical insights by domain specialists. Current state-of-the-art network analysis tools provide high flexibility at the expense of usability and have a steep learning curve. Recent---often web-based---analytical tools emphasize interactive visualizations and provide simple user interfaces but only limited analytical support. This paper describes the tool that supports the analytical work of network and security operators. We introduce typical user tasks and requirements. We also present the filtering funnel metaphor for exploring packet capture (PCAP) files through visualizations of linked filter steps. We have created PCAPFunnel, a novel tool that improves the user experience and speeds up packet capture data analysis. The tool provides an overview of the communication, intuitive data filtering, and details of individual network nodes and connections between them. The qualitative usability study with nine domain experts confirmed the usability and usefulness of our approach for the initial data exploration in a wide range of tasks and usage scenarios, from educational purposes to exploratory network data analysis.
Type Name Uploaded/Created by Uploaded/Created Rights
IV_21__PCAPFunnel-4.pdf  9/7/2021

Properties

Name
IV_21__PCAPFunnel-4.pdf
Address within IS
https://repozitar.cz/auth/repo/44959/1099090/
Address for the users outside IS
https://repozitar.cz/repo/44959/1099090/
Address within Manager
https://repozitar.cz/auth/repo/44959/1099090/?info
Address within Manager for the users outside IS
https://repozitar.cz/repo/44959/1099090/?info
Uploaded/Created
Fri 9/7/2021 02:21

Rights

Right to read
  • anyone on the Internet
Right to upload
 
Right to administer:
  • a concrete person Mgr. Lucie Vařechová, uco 106253
  • a concrete person RNDr. Daniel Jakubík, uco 139797
  • a concrete person Mgr. Jolana Surýnková, uco 220973
Attributes
 
Print
Add to clipboard Displayed: 20/5/2024 21:43