MOVICAB-IDS: Visual analysis of network traffic data streams for intrusion detection

Abstract

MOVICAB-IDS enables the more interesting projections of a massive traffic data set to be analysed, thereby providing an overview of any possible anomalous situations taking place on a computer network. This IDS responds to the challenges presented by traffic volume and diversity. It is a connectionist agent-based model extended by means of a functional and mobile visualization interface. The IDS is designed to be more flexible, accessible and portable by running on a great variety of applications, including small mobile ones such as PDA's, mobile phones or embedded devices. Furthermore, its effectiveness has been demonstrated in different tests. © Springer-Verlag Berlin Heidelberg 2006.