Abstract: Analyzing network trac to detect network security threats has drawn attentions from security researchers for decades. However, the new characteristics of network trac, such as explosive growth, more diverse attack types and higher dimension, have brought us new challenges. Because of these challenges, traditional detecting technologies like log analysis cannot directly identify threats from trac in time. Visualization can straightly and quickly display multi-dimensional information of large network trac. It can be our powerful weapon to meet the challenges. In this paper, we classify the network trac into four layers. According to dierent layer, we systematically survey several well-known network trac visualization systems. Then we analyze the advantages and disadvantages for each system and give out the comparisons. We also introduce the future works for network trac visualization.
Keywords: network trac, network security, visualization