Method and apparatus for visualizing network security alerts
A method and apparatus can be configured to perform the steps of displaying, on a display, a first visual representation of volume in three-dimensional space. The method can also display, on the display, a visual representation of a network security alert. The network security alert can correspond to a notification of a network attack, a network intrusion, or an unwanted activity. The representation of the network security alert can be positioned within the first visual representation of volume. The position of the representation of the network security alert within the first visual representation of volume reflects at least one characteristic of the network security alert.
1. A method, comprising:
displaying, on a display, a first visual representation of volume in three-dimensional space; and
displaying, on the display, a visual representation of a network security alert, wherein the network security alert corresponds to a notification of a network attack, a network intrusion, or an unwanted activity, the representation of the network security alert is positioned within the first visual representation of volume, and the position of the representation of the network security alert within the first visual representation of volume reflects at least one characteristic of the network security alert.
2. The method according to claim 1 , further comprising displaying, on the display, a second visual representation of volume in three-dimensional space, wherein the first visual representation of volume is positioned within the second visual representation of volume, and the first visual representation of volume is positioned within the second visual representation of volume in accordance with a first logical coordinate system.
3. The method according to claim 2 , further comprising displaying, on the display, a third visual representation of volume in three-dimensional space, wherein the second visual representation of volume is positioned within the third visual representation of volume, and the second visual representation of volume is positioned within the third visual representation of volume in accordance with a second logical coordinate system.
4. The method according to claim 1 , wherein the representation of the network security alert is positioned within the first visual representation of volume according to at least one of a source internet address, a source port, a destination internet address, a destination port, a protocol, an alert identification number, and a common field corresponding to the network security alert.
5. The method according to claim 2 , wherein the second representation of volume corresponds to a category such as one of a peer-to-peer category, a Trojan category, a chat client category, and a structured-query-language injection category.
6. The method according to claim 3 , wherein the first visual representation of volume corresponds to a representation of a solar system, the second visual representation of volume corresponds to a representation of a galaxy, and the third visual representation of volume corresponds to a representation of a universe.
7. An apparatus, comprising:
at least one processor; and
at least one memory including computer program code,
the at least one memory and the computer program code configured, with the at least one processor, to cause the apparatus at least to
display, on a display, a first visual representation of volume in three-dimensional space; and
display, on the display, a visual representation of a network security alert, wherein the network security alert corresponds to a notification of a network attack, a network intrusion, or an unwanted activity, the representation of the network security alert is positioned within the first visual representation of volume, and the position of the representation of the network security alert within the first visual representation of volume reflects at least one characteristic of the network security alert.
8. The apparatus according to claim 7 , wherein the apparatus is also caused to display, on the display, a second visual representation of volume in three-dimensional space, the first visual representation of volume is positioned within the second visual representation of volume, and the first visual representation of volume is positioned within the second visual representation of volume in accordance with a first logical coordinate system.
9. The apparatus according to claim 8 , wherein the apparatus is also caused to display, on the display, a third visual representation of volume in three-dimensional space, the second visual representation of volume is positioned within the third visual representation of volume, and the second visual representation of volume is positioned within the third visual representation of volume in accordance with a second logical coordinate system.
10. The apparatus according to claim 7 , wherein the representation of the network security alert is positioned within the first visual representation of volume according to at least one of a source internet address, a source port, a destination internet address, a destination port, a protocol, an alert identification number, and a common field corresponding to the network security alert.
11. The apparatus according to claim 8 , wherein the second representation of volume corresponds to a category such as one of a peer-to-peer category, a Trojan category, a chat client category, and a structured-query-language injection category.
12. The apparatus according to claim 9 , wherein the first visual representation of volume corresponds to a representation of a solar system, the second visual representation of volume corresponds to a representation of a galaxy, and the third visual representation of volume corresponds to a representation of a universe.
13. A computer program, embodied on a non-transitory computer readable medium, the computer program configured to control a processor to perform a process, comprising:
displaying, on a display, a first visual representation of volume in three-dimensional space; and
displaying, on the display, a visual representation of a network security alert, wherein the network security alert corresponds to a notification of a network attack, a network intrusion, or an unwanted activity, the representation of the network security alert is positioned within the first visual representation of volume, and the position of the representation of the network security alert within the first visual representation of volume reflects at least one characteristic of the network security alert.
14. The computer program of claim 13 , wherein the process further comprises displaying, on the display, a second visual representation of volume in three-dimensional space, the first visual representation of volume is positioned within the second visual representation of volume, and the first visual representation of volume is positioned within the second visual representation of volume in accordance with a first logical coordinate system.
15. The computer program of claim 14 , wherein the process further comprises displaying, on the display, a third visual representation of volume in three-dimensional space, the second visual representation of volume is positioned within the third visual representation of volume, and the second visual representation of volume is positioned within the third visual representation of volume in accordance with a second logical coordinate system.
16. The computer program according to claim 13 , wherein the representation of the network security alert is positioned within the first visual representation of volume according to at least one of a source internet address, a source port, a destination internet address, a destination port, a protocol, an alert identification number, and a common field corresponding to the network security alert.
17. The computer program according to claim 14 , wherein the second representation of volume corresponds to a category such as one of a peer-to-peer category, a Trojan category, a chat client category, and a structured-query-language injection category.
18. The computer program according to claim 15 , wherein the first visual representation of volume corresponds to a representation of a solar system, the second visual representation of volume corresponds to a representation of a galaxy, and the third visual representation of volume corresponds to a representation of a universe.