Educause Security Discussion mailing list archives

Re: Visual Interpretation of Internet Threats


From: Brent Sweeny <sweeny () INDIANA EDU>
Date: Thu, 29 Nov 2007 09:43:30 -0500

at the annual Supercomputing conference, they show in a large-screen TV
screen a continuously-updated table of a number of security threats,
including numbers of plain-text root logins, incoming attacks, and lots of
others. it gets lots of interest, but one of the screens that gets the most
interest is a table showing all of the plaintext passwords seen in the
clear!  "if you see your password in this list, other people do too!" Bill
Nickless at PNNL could give you more information.

On 11/29/2007 9:37 AM, Gary Flynn wrote:
Sadler, Connie wrote:
This may be a strange request, but I'm wondering if anyone knows of
attempts to make visuals of Internet threats. One of the big issues we
face is the fact that people don't see the threats, and what they
don't see, they don't take seriously. Metrics help, demos help, and
good stories help, but if anyone knows of some visuals that can help
people to actually "see" the threat, or a representation of the
threat, I'd LOVE to hear about it.


Graphs showing attack frequencies and access violations can help.

I've often thought of putting together a real-time demo with a live
graph and sound. One click for each event. Things like:

1) mail server detected viruses
2) network access rule violations
3) IPS/IDS detections

Maybe compare that to lists of software security defects,
configuration vulnerabilities, and exposed computers
and services.

The sound, though, may be one long buzz :)


Current thread: