{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T15:52:52Z","timestamp":1774367572899,"version":"3.50.1"},"reference-count":108,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2017,4,24]],"date-time":"2017-04-24T00:00:00Z","timestamp":1492992000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci. China Inf. Sci."],"published-print":{"date-parts":[[2017,12]]},"DOI":"10.1007\/s11432-016-0428-2","type":"journal-article","created":{"date-parts":[[2017,5,3]],"date-time":"2017-05-03T01:12:07Z","timestamp":1493773927000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":36,"title":["A survey of network anomaly visualization"],"prefix":"10.1007","volume":"60","author":[{"given":"Tianye","family":"Zhang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xumeng","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zongzhuang","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fangzhou","family":"Guo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuxin","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,4,24]]},"reference":[{"key":"428_CR1","doi-asserted-by":"publisher","first-page":"1313","DOI":"10.1109\/TVCG.2011.144","volume":"18","author":"H Shiravi","year":"2012","unstructured":"Shiravi H, Shiravi A, Ghorbani A A. A survey of visualization systems for network security. IEEE Trans Visual Comput Graph, 2012, 18: 1313\u20131329","journal-title":"IEEE Trans Visual Comput Graph"},{"key":"428_CR2","first-page":"131","volume-title":"Visualizing network security events using compound glyphs from a service-oriented perspective","author":"J Pearlman","year":"2008","unstructured":"Pearlman J, Rheingans P. Visualizing network security events using compound glyphs from a service-oriented perspective. In: Proceedings of the Workshop on Visualization for Computer Security, Sacramento, 2008. 131\u2013146"},{"key":"428_CR3","first-page":"161","volume-title":"Existence plots: a low-resolution time series for port behavior analysis","author":"J Janies","year":"2008","unstructured":"Janies J. Existence plots: a low-resolution time series for port behavior analysis. In: Proceedings of the 5th International Workshop on Visualization for Computer Security, Cambridge, 2008. 161\u2013168"},{"key":"428_CR4","first-page":"143","volume-title":"SnortView: visualization system of snort logs","author":"H Koike","year":"2004","unstructured":"Koike H, Ohno K. SnortView: visualization system of snort logs. In: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, Washington, 2004. 143\u2013147"},{"key":"428_CR5","first-page":"139","volume-title":"Spiralview: towards security policies assessment through visual correlation of network resources with evolution of alarms","author":"E Bertini","year":"2007","unstructured":"Bertini E, Hertzog P, Lalanne D. Spiralview: towards security policies assessment through visual correlation of network resources with evolution of alarms. In: Proceedings of IEEE Symposium on Visual Analytics Science and Technology, Washington, 2007. 139\u2013146"},{"key":"428_CR6","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1109\/MCG.2006.49","volume":"26","author":"S Foresti","year":"2006","unstructured":"Foresti S, Agutter J, Livnat Y, et al. Visual correlation of network alerts. IEEE Comput Graph, 2006, 26: 48\u201359","journal-title":"IEEE Comput Graph"},{"key":"428_CR7","first-page":"129","volume-title":"Visual firewall: real-time network security monitor","author":"C P Lee","year":"2005","unstructured":"Lee C P, Tros J, Gibbs N, et al. Visual firewall: real-time network security monitor. In: Proceedings of IEEE Workshop on Visualization for Computer Security, Minneapolis, 2005. 129\u2013136"},{"key":"428_CR8","first-page":"91","volume-title":"Visualizing cyber attacks using ip matrix","author":"H Koike","year":"2005","unstructured":"Koike H, Ohno K, Koizumi K. Visualizing cyber attacks using ip matrix. In: Proceedings of IEEE Workshop on Visualization for Computer Security, Minneapolis, 2005. 91\u201398"},{"key":"428_CR9","first-page":"319","volume-title":"An integrated visualization on network events vast 2011 mini challenge #2 award: outstanding integrated overview display","author":"W M Lamagna","year":"2011","unstructured":"Lamagna W M. An integrated visualization on network events vast 2011 mini challenge #2 award: outstanding integrated overview display. In: Proceedings of IEEE Conference on Visual Analytics Science and Technology, Providence, 2011. 319\u2013321"},{"key":"428_CR10","first-page":"315","volume-title":"Geovisual analytics for cyber security: adopting the geoviz toolkit","author":"N A Giacobe","year":"2011","unstructured":"Giacobe N A, Xu S. Geovisual analytics for cyber security: adopting the geoviz toolkit. In: Proceedings of IEEE Conference on Visual Analytics Science and Technology, Providence, 2011. 315\u2013316"},{"key":"428_CR11","first-page":"445","volume-title":"IDS alert visualization and monitoring through heuristic host selection","author":"H Shiravi","year":"2010","unstructured":"Shiravi H, Shiravi A, Ghorbani A A. IDS alert visualization and monitoring through heuristic host selection. In: Proceedings of International Conference on Information and Communications Security, Barcelona, 2010. 445\u2013458"},{"key":"428_CR12","first-page":"2507","volume-title":"Intrusion behavior detection through visualization","author":"R F Erbacher","year":"2003","unstructured":"Erbacher R F. Intrusion behavior detection through visualization. In: Proceedings of IEEE International Conference on Systems, Man and Cybernetics, Washington, 2003. 2507\u20132513"},{"key":"428_CR13","first-page":"1","volume-title":"IDS rainstorm: visualizing IDS alarms","author":"K Abdullah","year":"2005","unstructured":"Abdullah K, Lee C, Conti G, et al. IDS rainstorm: visualizing IDS alarms. In: Proceedings of the IEEE Workshops on Visualization for Computer Security, Minneapolis, 2005. 1"},{"key":"428_CR14","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1109\/38.974517","volume":"22","author":"R F Erbacher","year":"2002","unstructured":"Erbacher R F, Walker K L, Frincke D A. Intrusion and misuse detection in large-scale systems. IEEE Comput Graph, 2002, 22: 38\u201347","journal-title":"IEEE Comput Graph"},{"key":"428_CR15","first-page":"19","volume-title":"An eye on network intruder-administrator shootouts","author":"L Girardin","year":"1999","unstructured":"Girardin L. An eye on network intruder-administrator shootouts. In: Proceedings of Workshop on Intrusion Detection and Network Monitoring, Santa Clara, 1999. 19\u201328"},{"key":"428_CR16","first-page":"277","volume-title":"Network intrusion visualization with niva, an intrusion detection visual analyzer with haptic integration","author":"K Nyarko","year":"2002","unstructured":"Nyarko K, Capers T, Scott C, et al. Network intrusion visualization with niva, an intrusion detection visual analyzer with haptic integration. In: Proceedings of 10th Symposium on Haptic Interfaces for Virtual Environment and Teleoperator Systems, Orlando, 2002. 277\u2013284"},{"key":"428_CR17","unstructured":"Maltego. Paterva Company. http:\/\/www.paterva.com\/web7"},{"key":"428_CR18","first-page":"172","volume-title":"Internet routing anomaly detection and visualization","author":"T Wong","year":"2005","unstructured":"Wong T, Jacobson V, Alaettinoglu C. Internet routing anomaly detection and visualization. In: Proceedings of International Conference on Dependable Systems and Networks, Yokohama, 2005. 172\u2013181"},{"key":"428_CR19","first-page":"35","volume-title":"Combining visual and automated data mining for near-real-time anomaly detection and analysis in BGP","author":"S T Teoh","year":"2004","unstructured":"Teoh S T, Zhang K, Tseng S M, et al. Combining visual and automated data mining for near-real-time anomaly detection and analysis in BGP. In: Proceedings of the 2004 ACM Workshop on Visualization and Data Mining for Computer Security, Washington, 2004. 35\u201344"},{"key":"428_CR20","first-page":"81","volume-title":"BGP eye: a new visualization tool for real-time detection and analysis of BGP anomalies","author":"S T Teoh","year":"2006","unstructured":"Teoh S T, Ranjan S, Nucci A, et al. BGP eye: a new visualization tool for real-time detection and analysis of BGP anomalies. In: Proceedings of the 3rd International Workshop on Visualization for Computer Security, Alexandria, 2006. 81\u201390"},{"key":"428_CR21","first-page":"1","volume-title":"Ocelot: user-centered design of a decision support visualization for network quarantine","author":"D L Arendt","year":"2015","unstructured":"Arendt D L, Burtner R, Best D M, et al. Ocelot: user-centered design of a decision support visualization for network quarantine. In: Proceedings of IEEE Symposium on Visualization for Cyber Security, Chicago, 2015. 1\u20138"},{"key":"428_CR22","first-page":"570","volume-title":"Tudumi: information visualization system for monitoring and auditing computer logs","author":"T Takada","year":"2002","unstructured":"Takada T, Koike H. Tudumi: information visualization system for monitoring and auditing computer logs. In: Proceedings fo 6th International Conference on Information Visualisation, London, 2002. 570\u2013576"},{"key":"428_CR23","first-page":"23","volume-title":"Visualizing DNS traffic","author":"P Ren","year":"2006","unstructured":"Ren P, Kristoff J, Gooch B. Visualizing DNS traffic. In: Proceedings of the 3rd International Workshop on Visualization for Computer Security, Alexandria, 2006. 23\u201330"},{"key":"428_CR24","first-page":"47","volume-title":"Preserving the big picture: visual network traffic analysis with TN","author":"J R Goodall","year":"2005","unstructured":"Goodall J R, Lutters W G, Rheingans P, et al. Preserving the big picture: visual network traffic analysis with TN. In: Proceedings of IEEE Workshop on Visualization for Computer Security, Minneapolis, 2005. 47\u201354"},{"key":"428_CR25","first-page":"26","volume-title":"Visflowconnect: netflow visualizations of link relationships for security situational awareness","author":"X X Yin","year":"2004","unstructured":"Yin X X, Yurcik W, Treaster M, et al. Visflowconnect: netflow visualizations of link relationships for security situational awareness. In: Proceedings of ACM Workshop on Visualization and Data Mining for Computer Security, Washington, 2004. 26\u201334"},{"key":"428_CR26","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/MCG.2015.97","volume":"35","author":"F Zhou","year":"2015","unstructured":"Zhou F, Huang W, Zhao Y, et al. Entvis: a visual analytic tool for entropy-based network traffic anomaly detection. IEEE Comput Graph Appl, 2015, 35: 1","journal-title":"IEEE Comput Graph Appl"},{"key":"428_CR27","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1016\/j.cose.2006.10.001","volume":"26","author":"L V Onut","year":"2007","unstructured":"Onut L V, Ghorbani A A. Svision: a novel visual network-anomaly identification technique. Comput Secur, 2007, 26: 201\u2013212","journal-title":"Comput Secur"},{"key":"428_CR28","first-page":"55","volume-title":"Home-centric visualization of network traffic for security administration","author":"R Ball","year":"2004","unstructured":"Ball R, Fink G A, North C. Home-centric visualization of network traffic for security administration. In: Proceedings of ACM Workshop on Visualization and Data Mining for Computer Security, Washington, 2004. 55\u201364"},{"key":"428_CR29","first-page":"65","volume-title":"Nvisionip: netflow visualizations of system state for security situational awareness","author":"K Lakkaraju","year":"2004","unstructured":"Lakkaraju K, Yurcik W, Lee A J. Nvisionip: netflow visualizations of system state for security situational awareness. In: Proceedings of ACM Workshop on Visualization and Data Mining for Computer Security, Washington, 2004. 65\u201372"},{"key":"428_CR30","first-page":"123","volume-title":"Monitoring network traffic with radial traffic analyzer","author":"D A Keim","year":"2006","unstructured":"Keim D A, Mansmann F, Schneidewind J, et al. Monitoring network traffic with radial traffic analyzer. In: Proceedings of IEEE Symposium on Visual Analytics Science and Technology, Baltimore, 2006. 123\u2013128"},{"key":"428_CR31","first-page":"1","volume-title":"Ensemble visualization for cyber situation awareness of network security data","author":"L H Hao","year":"2015","unstructured":"Hao L H, Healey C G, Hutchinson S E. Ensemble visualization for cyber situation awareness of network security data. In: Proceedings of IEEE Symposium on Visualization for Cyber Security, Chicago, 2015. 1\u20138"},{"key":"428_CR32","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1147\/JRD.2013.2249356","volume":"57","author":"Q Liao","year":"2013","unstructured":"Liao Q, Shi L H, Wang C Y. Visual analysis of large-scale network anomalies. IBM J Res Devel, 2013, 57: 1\u201312","journal-title":"IBM J Res Devel"},{"key":"428_CR33","first-page":"11","volume-title":"Visual correlation of host processes and network traffic","author":"G A Fink","year":"2005","unstructured":"Fink G A, Muessig P, North C. Visual correlation of host processes and network traffic. In: Proceedings of IEEE Workshop on Visualization for Computer Security, Minneapolis, 2005. 11\u201319"},{"key":"428_CR34","first-page":"39","volume-title":"Idgraphs: intrusion detection and analysis using histographs","author":"P Ren","year":"2005","unstructured":"Ren P, Gao Y, Li Z, et al. Idgraphs: intrusion detection and analysis using histographs. In: Proceedings of IEEE Workshop on Visualization for Computer Security, Minneapolis, 2005. 39\u201346"},{"key":"428_CR35","first-page":"73","volume-title":"Portvis: a tool for port-based detection of security events","author":"J McPherson","year":"2004","unstructured":"McPherson J, Ma K L, Krystosk P, et al. Portvis: a tool for port-based detection of security events. In: Proceedings of ACM Workshop on Visualization and Data Mining for Computer Security, Washington, 2004. 73\u201381"},{"key":"428_CR36","first-page":"100","volume-title":"Visualizing network data for intrusion detection","author":"K Abdullah","year":"2005","unstructured":"Abdullah K, Lee C, Conti G, et al. Visualizing network data for intrusion detection. In: Proceedings of Information Assurance Workshop From the 6th Annual IEEE SMC, College Park, 2005. 100\u2013108"},{"key":"428_CR37","first-page":"186","volume-title":"Flovis: flow visualization system","author":"T Taylor","year":"2009","unstructured":"Taylor T, Paterson D, Glanfield J, et al. Flovis: flow visualization system. In: Proceedings of the Cybersecurity Applications & Technology Conference for Homeland Security, Washington, 2009. 186\u2013198"},{"key":"428_CR38","first-page":"11","volume-title":"Over flow: an overview visualization for network analysis","author":"J Glanfield","year":"2009","unstructured":"Glanfield J, Brooks S, Taylor T, et al. Over flow: an overview visualization for network analysis. In: Proceedings of the International Workshop on Visualization for Cyber Security, Atlantic, 2009. 11\u201319"},{"key":"428_CR39","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/s12650-014-0213-6","volume":"17","author":"Y Zhao","year":"2014","unstructured":"Zhao Y, Liang X, Fan X P, et al. Mvsec: multi-perspective and deductive visual analytics on heterogeneous network security data. J Visual, 2014, 17: 181\u2013196","journal-title":"J Visual"},{"key":"428_CR40","first-page":"111","volume-title":"Large-scale network monitoring for visual analysis of attacks","author":"F Fischer","year":"2008","unstructured":"Fischer F, Mansmann F, Keim D A, et al. Large-scale network monitoring for visual analysis of attacks. In: Proceedings of the 5th International Workshop on Visualization for Computer Security, Cambridge, 2008. 111\u2013118"},{"key":"428_CR41","doi-asserted-by":"publisher","first-page":"725","DOI":"10.1109\/TVCG.2006.185","volume":"12","author":"P F Cortese","year":"2006","unstructured":"Cortese P F, Battista G D, Moneta A, et al. Topographic visualization of prefix propagation in the internet. IEEE Trans Vis Comput Graph, 2006, 12: 725\u2013732","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR42","doi-asserted-by":"publisher","first-page":"1105","DOI":"10.1109\/TVCG.2007.70522","volume":"13","author":"F Mansmann","year":"2007","unstructured":"Mansmann F, Daniel A K, Stephen C N, et al. Visual analysis of network traffic for resource planning, interactive monitoring, and interpretation of security threats. IEEE Trans Vis Comput Graph, 2007, 13: 1105\u20131112","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR43","first-page":"72","volume-title":"Daedalus-viz: novel real-time 3D visualization for darknet monitoring-based alert system","author":"D Inoue","year":"2012","unstructured":"Inoue D, Eto M, Suzuki K, et al. Daedalus-viz: novel real-time 3D visualization for darknet monitoring-based alert system. In: Proceedings of the 9th International Symposium on Visualization for Cyber Security, Seattle, 2012. 72\u201379"},{"key":"428_CR44","first-page":"58","volume-title":"Nicter: an incident analysis system toward binding network monitoring with malware analysis","author":"D Inoue","year":"2008","unstructured":"Inoue D, Eto M, Yoshioka K, et al. Nicter: an incident analysis system toward binding network monitoring with malware analysis. In: Proceedings of WOMBAT Workshop on Information Security Threats Data Collection and Sharing, Amsterdam, 2008. 58\u201366"},{"key":"428_CR45","first-page":"150","volume-title":"Flamingo: visualizing internet traffic","author":"J Oberheide","year":"2006","unstructured":"Oberheide J, Goff M, Karir M. Flamingo: visualizing internet traffic. In: Proceedings of Network Operations and Management Symposium, Vancouver, 2006. 150\u2013161"},{"key":"428_CR46","first-page":"1","volume-title":"Visualization of complex attacks and state of attacked network","author":"A Yelizarov","year":"2009","unstructured":"Yelizarov A, Gamayunov D. Visualization of complex attacks and state of attacked network. In: Proceedings of VizSec International Workshop on Visualization for Cyber Security, Atlantic, 2009. 1\u20139"},{"key":"428_CR47","first-page":"1","volume-title":"Percival: proactive and reactive attack and response assessment for cyber incidents using visual analytics","author":"M Angelini","year":"2015","unstructured":"Angelini M, Prigent N, Santucci G. Percival: proactive and reactive attack and response assessment for cyber incidents using visual analytics. In: Proceedings of IEEE Symposium on Visualization for Cyber Security, Chicago, 2015. 1\u20138"},{"key":"428_CR48","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1109\/2945.468391","volume":"1","author":"E D Kolaczyk","year":"1995","unstructured":"Kolaczyk E D, Csrdi G. Visualizing network data. IEEE Trans Vis Comput Graph, 1995, 1: 16\u201328","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR49","first-page":"25","volume-title":"Cybersave: situational awareness visualization for cyber security of smart grid systems","author":"W J Matuszak","year":"2013","unstructured":"Matuszak W J, DiPippo L, Sun Y L. Cybersave: situational awareness visualization for cyber security of smart grid systems. In: Proceedings of the 10th Workshop on Visualization for Cyber Security, Atlanta, 2013. 25\u201332"},{"key":"428_CR50","first-page":"506","volume-title":"Visualization of security metrics for cyber situation awareness","author":"I Kotenko","year":"2014","unstructured":"Kotenko I, Novikova E. Visualization of security metrics for cyber situation awareness. In: Proceedings of International Conference on Availability, Reliability and Security, Switzerland, 2014. 506\u2013513"},{"key":"428_CR51","first-page":"687","volume":"26","author":"Y Zhao","year":"2014","unstructured":"Zhao Y, Fan X P, Zhou F F, et al. A survey on network security data visualization. J Comput Aided Des Comput Graph, 2014, 26: 687\u2013697","journal-title":"J Comput Aided Des Comput Graph"},{"key":"428_CR52","first-page":"41","volume-title":"Malwarevis: entity-based visualization of malware network traces","author":"W Zhuo","year":"2012","unstructured":"Zhuo W, Nadjin Y. Malwarevis: entity-based visualization of malware network traces. In: Proceedings of the 9th International Symposium on Visualization for Cyber Security, Seattle, 2012. 41\u201347"},{"key":"428_CR53","first-page":"33","volume-title":"Visual analysis of malware behavior using treemaps and thread graphs","author":"P Trinius","year":"2009","unstructured":"Trinius P, Holz T, G\u00a8obel J, et al. Visual analysis of malware behavior using treemaps and thread graphs. In: Proceedings of 6th International Workshop on Visualization for Cyber Security, Atlantic, 2009. 33\u201338"},{"key":"428_CR54","first-page":"72","volume-title":"Seem: a scalable visualization for comparing multiple large sets of attributes for malware analysis","author":"R Gove","year":"2014","unstructured":"Gove R, Saxe J, Gold S, et al. Seem: a scalable visualization for comparing multiple large sets of attributes for malware analysis. In: Proceedings of the Eleventh Workshop on Visualization for Cyber Security, Paris, 2014. 72\u201379"},{"key":"428_CR55","first-page":"121","volume-title":"Designing visualization capabilities for IDS challenges","author":"R F Erbacher","year":"2005","unstructured":"Erbacher R F, Christensen K, Sundberg A. Designing visualization capabilities for IDS challenges. In: Proceedings of IEEE Workshop on Visualization for Computer Security, Minneapolis, 2005. 121\u2013127"},{"key":"428_CR56","volume-title":"Readings in Information Visualization: Using Vision to Think","author":"S K Card","year":"1999","unstructured":"Card S K, Mackinlay J D, Shneiderman B. Readings in Information Visualization: Using Vision to Think. San Francisco: Morgan Kaufmann, 1999"},{"key":"428_CR57","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1109\/TVCG.2007.70415","volume":"14","author":"W Aigner","year":"2008","unstructured":"Aigner W, Miksch S, Muller W, et al. Visual methods for analyzing time-oriented data. IEEE Trans Vis Comput Graph, 2008, 14: 47\u201360","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR58","doi-asserted-by":"publisher","first-page":"1743","DOI":"10.1109\/TVCG.2014.2346913","volume":"20","author":"C Xie","year":"2014","unstructured":"Xie C, Chen W, Huang X X, et al. VAET: a visual analytics approach for E-transactions time-series. IEEE Trans Vis Comput Graph, 2014, 20: 1743\u20131752","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR59","doi-asserted-by":"publisher","first-page":"2003","DOI":"10.1109\/TVCG.2014.2346250","volume":"20","author":"B Kondo","year":"2014","unstructured":"Kondo B, Collins C M. Dimpvis: exploring time-varying information visualizations by direct manipulation. IEEE Trans Vis Comput Graph, 2014, 20: 2003\u20132012","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR60","doi-asserted-by":"publisher","first-page":"2349","DOI":"10.1109\/TVCG.2014.2346456","volume":"20","author":"K E Isaacs","year":"2014","unstructured":"Isaacs K E, Bremer P T, Jusufi I, et al. Combing the communication hairball: visualizing parallel execution traces using logical time. IEEE Trans Vis Comput Graph, 2014, 20: 2349\u20132358","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR61","doi-asserted-by":"publisher","first-page":"1783","DOI":"10.1109\/TVCG.2014.2346682","volume":"20","author":"D Gotz","year":"2014","unstructured":"Gotz D, Stavropoulos H. Decisionflow: visual analytics for high-dimensional temporal event sequence data. IEEE Trans Vis Comput Graph, 2014, 20: 1783\u20131792","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR62","doi-asserted-by":"publisher","first-page":"210","DOI":"10.1109\/TVCG.2015.2467971","volume":"22","author":"I Cho","year":"2016","unstructured":"Cho I, Dou W, Wang D X Y, et al. Vairoma: a visual analytics system for making sense of places, times, and events in Roman history. IEEE Trans Vis Comput Graph, 2016, 22: 210\u2013219","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR63","doi-asserted-by":"publisher","first-page":"300","DOI":"10.1109\/TVCG.2015.2467531","volume":"22","author":"J Fulda","year":"2016","unstructured":"Fulda J, Brehmer M, Munzner T. Timelinecurator: interactive authoring of visual timelines from unstructured text. IEEE Trans Vis Computer Graph, 2016, 22: 300\u2013309","journal-title":"IEEE Trans Vis Computer Graph"},{"key":"428_CR64","doi-asserted-by":"publisher","first-page":"409","DOI":"10.1109\/TVCG.2015.2467325","volume":"22","author":"M H Loorak","year":"2016","unstructured":"Loorak M H, Perin C, Kamal N, et al. Timespan: using visualization to explore temporal multi-dimensional data of stroke patients. IEEE Trans Vis Comput Graph, 2016, 22: 409\u2013418","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR65","doi-asserted-by":"publisher","first-page":"549","DOI":"10.1109\/TVCG.2015.2467751","volume":"22","author":"J Walker","year":"2016","unstructured":"Walker J, Borgo R, Jones M W. Timenotes: a study on effective chart visualization and interaction techniques for time-series data. IEEE Trans Vis Comput Graph, 2016, 22: 549\u2013558","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR66","doi-asserted-by":"publisher","first-page":"559","DOI":"10.1109\/TVCG.2015.2467851","volume":"22","author":"B Bach","year":"2016","unstructured":"Bach B, Shi C, Heulot N, et al. Time curves: folding time to visualize patterns of temporal evolution in data. IEEE Trans Vis Comput Graph, 2016, 22: 559\u2013568","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR67","doi-asserted-by":"publisher","first-page":"965","DOI":"10.1109\/TVCG.2015.2468031","volume":"22","author":"Y Gu","year":"2016","unstructured":"Gu Y, Wang C L, Peterka T, et al. Mining graphs for understanding time-varying volumetric data. IEEE Trans Vis Comput Graph, 2016, 22: 965\u2013974","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR68","doi-asserted-by":"publisher","first-page":"569","DOI":"10.1109\/TVCG.2015.2467322","volume":"22","author":"Y Albo","year":"2016","unstructured":"Albo Y, Lanir J, Bak P, et al. Off the radar: comparative evaluation of radial visualization solutions for composite indicators. IEEE Trans Vis Comput Graph, 2016, 22: 569\u2013578","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR69","doi-asserted-by":"publisher","first-page":"539","DOI":"10.1109\/TVCG.2015.2467752","volume":"22","author":"T Gschwandtner","year":"2016","unstructured":"Gschwandtner T, Bogl M, Federico P, et al. Visual encodings of temporal uncertainty: a comparative user study. IEEE Trans Vis Comput Graph, 2016, 22: 539\u2013548","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR70","doi-asserted-by":"publisher","first-page":"1753","DOI":"10.1109\/TVCG.2014.2346919","volume":"20","author":"G D Sun","year":"2014","unstructured":"Sun G D, Wu Y C, Liu S X, et al. Evoriver: visual analysis of topic coopetition on social media. IEEE Trans Vis Comput Graph, 2014, 20: 1753\u20131762","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR71","doi-asserted-by":"publisher","first-page":"190","DOI":"10.1109\/TVCG.2015.2467621","volume":"22","author":"F Heimerl","year":"2016","unstructured":"Heimerl F, Han Q, Koch S. Citerivers: visual analytics of citation patterns. IEEE Trans Vis Comput Graph, 2016, 22: 190\u2013199","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR72","doi-asserted-by":"publisher","first-page":"1773","DOI":"10.1109\/TVCG.2014.2346922","volume":"20","author":"J Zhao","year":"2014","unstructured":"Zhao J, Cao N, Wen Z, et al. Fluxflow: visual analysis of anomalous information spreading on social media. IEEE Trans Vis Comput Graph, 2014, 20: 1773\u20131782","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR73","doi-asserted-by":"publisher","first-page":"2970","DOI":"10.1109\/TITS.2015.2436897","volume":"16","author":"W Chen","year":"2015","unstructured":"Chen W, Guo F Z, Wang F Y. A survey of traffic data visualization. IEEE Trans Intel Transp Syst, 2015, 16: 2970\u20132984","journal-title":"IEEE Trans Intel Transp Syst"},{"key":"428_CR74","doi-asserted-by":"publisher","first-page":"2023","DOI":"10.1109\/TVCG.2014.2346260","volume":"20","author":"S Gratzl","year":"2014","unstructured":"Gratzl S, Gehlenborg N, Lex A, et al. Domino: extracting, comparing, and manipulating subsets across multiple tabular datasets. IEEE Trans Vis Comput Graph, 2014, 20: 2023\u20132032","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR75","doi-asserted-by":"publisher","first-page":"131","DOI":"10.1109\/TVCG.2015.2467615","volume":"22","author":"H Kim","year":"2016","unstructured":"Kim H, Choo J, Park H, et al. Interaxis: steering scatterplot axes via observation-level interaction. IEEE Trans Vis Comput Graph, 2016, 22: 131\u2013140","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR76","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1109\/TVCG.2015.2467612","volume":"22","author":"T Lowe","year":"2016","unstructured":"Lowe T, Forster E C, Albuquerque G, et al. Visual analytics for development and evaluation of order selection criteria for autoregressive processes. IEEE Trans Vis Comput Graph, 2016, 22: 151\u2013159","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR77","volume-title":"Data Visualization","author":"W Chen","year":"2013","unstructured":"Chen W, Shen Z Q, Tao Y B. Data Visualization. Beijing: Publishing House of Electronic Industry, 2013"},{"key":"428_CR78","doi-asserted-by":"publisher","first-page":"280","DOI":"10.1109\/TVCG.2015.2467196","volume":"22","author":"N Cao","year":"2016","unstructured":"Cao N, Shi C, Lin S, et al. Targetvue: visual analysis of anomalous user behaviors in online communication systems. IEEE Trans Vis Comput Graph, 2016, 22: 280\u2013289","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR79","doi-asserted-by":"publisher","first-page":"619","DOI":"10.1109\/TVCG.2015.2467324","volume":"22","author":"M Rubio-Sanchez","year":"2016","unstructured":"Rubio-Sanchez M, Raya L, Diaz F, et al. A comparative study between radviz and star coordinates. IEEE Trans Vis Comput Graph, 2016, 22: 619\u2013628","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR80","doi-asserted-by":"publisher","first-page":"111","DOI":"10.1109\/TVCG.2015.2467954","volume":"22","author":"C Papadopoulos","year":"2016","unstructured":"Papadopoulos C, Gutenko I, Kaufman A E. Veevvie: visual explorer for empirical visualization, vr and interaction experiments. IEEE Trans Vis Comput Graph, 2016, 22: 111\u2013120","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR81","doi-asserted-by":"publisher","first-page":"230","DOI":"10.1109\/TVCG.2015.2467931","volume":"22","author":"J Wang","year":"2016","unstructured":"Wang J, Mueller K. The visual causality analyst: an interactive interface for causal reasoning. IEEE Trans Vis Comput Graph, 2016, 22: 230\u2013239","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR82","doi-asserted-by":"publisher","first-page":"499","DOI":"10.1109\/TVCG.2015.2467195","volume":"22","author":"S Lee","year":"2016","unstructured":"Lee S, Kim S H, Hung Y H, et al. How do people make sense of unfamiliar visualizations?: a grounded model of novice\u2019s information visualization sensemaking. IEEE Trans Vis Comput Graph, 2016, 22: 499\u2013508","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR83","doi-asserted-by":"publisher","first-page":"579","DOI":"10.1109\/TVCG.2015.2466992","volume":"22","author":"J Johansson","year":"2016","unstructured":"Johansson J, Forsell C. Evaluation of parallel coordinates: overview, categorization and guidelines for future research. IEEE Trans Vis Comput Graph, 2016, 22: 579\u2013588","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR84","doi-asserted-by":"publisher","first-page":"589","DOI":"10.1109\/TVCG.2015.2467872","volume":"22","author":"R G Raidou","year":"2016","unstructured":"Raidou R G, Eisemann M, Breeuwer M, et al. Orientation-enhanced parallel coordinate plots. IEEE Trans Vis Comput Graph, 2016, 22: 589\u2013598","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR85","doi-asserted-by":"publisher","first-page":"1072","DOI":"10.1109\/TVCG.2015.2410278","volume":"21","author":"H D Chen","year":"2015","unstructured":"Chen H D, Zhang S, Chen W, et al. Uncertainty-aware multidimensional ensemble data visualization and exploration. IEEE Trans Vis Comput Graph, 2015, 21: 1072\u20131086","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR86","doi-asserted-by":"publisher","first-page":"419","DOI":"10.1109\/TVCG.2015.2467271","volume":"22","author":"J C Roberts","year":"2016","unstructured":"Roberts J C, Headleand C, Ritsos P D. Sketching designs using the five design-sheet methodology. IEEE Trans Vis Comput Graph, 2016, 22: 419\u2013428","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR87","doi-asserted-by":"publisher","first-page":"459","DOI":"10.1109\/TVCG.2015.2469125","volume":"22","author":"S VanderPlas","year":"2016","unstructured":"VanderPlas S, Hofmann H. Spatial reasoning and data displays. IEEE Trans Vis Comput Graph, 2016, 22: 459\u2013468","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR88","doi-asserted-by":"publisher","first-page":"599","DOI":"10.1109\/TVCG.2015.2467199","volume":"22","author":"S Goodwin","year":"2016","unstructured":"Goodwin S, Dykes J, Slingsby A, et al. Visualizing multiple variables across scale and geography. IEEE Trans Vis Comput Graph, 2016, 22: 599\u2013608","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR89","doi-asserted-by":"publisher","first-page":"379","DOI":"10.1109\/TVCG.2015.2467112","volume":"22","author":"R Scheepens","year":"2016","unstructured":"Scheepens R, Hurter C, van de Wetering H, et al. Visualization, selection, and analysis of traffic flows. IEEE Trans Vis Comput Graph, 2016, 22: 379\u2013388","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR90","doi-asserted-by":"publisher","first-page":"609","DOI":"10.1109\/TVCG.2015.2467132","volume":"22","author":"D J Lehmann","year":"2016","unstructured":"Lehmann D J, Theisel H. Optimal sets of projections of high-dimensional data. IEEE Trans Vis Comput Graph, 2016, 22: 609\u2013618","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR91","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1109\/TVCG.2015.2467552","volume":"22","author":"S H Cheng","year":"2016","unstructured":"Cheng S H, Mueller K. The data context map: fusing data and attributes into a unified display. IEEE Trans Vis Comput Graph, 2016, 22: 121\u2013130","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR92","doi-asserted-by":"publisher","first-page":"141","DOI":"10.1109\/TVCG.2015.2467553","volume":"22","author":"D Jackle","year":"2016","unstructured":"Jackle D, Fischer F, Schreck T, et al. Temporal mds plots for analysis of multivariate data. IEEE Trans Vis Comput Graph, 2016, 22: 141\u2013150","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR93","doi-asserted-by":"publisher","first-page":"629","DOI":"10.1109\/TVCG.2015.2467717","volume":"22","author":"J Stahnke","year":"2016","unstructured":"Stahnke J, Dork M, Muller B, et al. Probing projections: interaction techniques for interpreting arrangements and errors of dimensionality reductions. IEEE Trans Vis Comput Graph, 2016, 22: 629\u2013638","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR94","doi-asserted-by":"publisher","first-page":"266","DOI":"10.1007\/978-3-642-97966-8","volume-title":"Self-Organizing Maps","author":"T Kohonen","year":"1997","unstructured":"Kohonen T. Self-Organizing Maps. New York: Springer, 1997. 266\u2013270"},{"key":"428_CR95","doi-asserted-by":"publisher","first-page":"122","DOI":"10.1109\/TVCG.2014.2329308","volume":"21","author":"F Amini","year":"2015","unstructured":"Amini F, Rufiange S, Hossain Z, et al. The impact of interactivity on comprehending 2D and 3D visualizations of movement data. IEEE Trans Vis Comput Graph, 2015, 21: 122\u2013135","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR96","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1109\/TVCG.2006.17","volume":"12","author":"M Tory","year":"2006","unstructured":"Tory M, Kirkpatrick A E, Atkins M S, et al. Visualization task performance with 2D, 3D, and combination displays. IEEE Trans Vis Comput Graph, 2006, 12: 2\u201313","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR97","doi-asserted-by":"publisher","first-page":"310","DOI":"10.1109\/TVCG.2015.2467813","volume":"22","author":"M Y Sun","year":"2016","unstructured":"Sun M Y, Mi P, North C, Ramakrishnan N. Biset: semantic edge bundling with biclusters for sensemaking. IEEE Trans Vis Comput Graph, 2016, 22: 310\u2013319","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR98","doi-asserted-by":"publisher","first-page":"11","DOI":"10.1109\/TVCG.2015.2468111","volume":"22","author":"T Landesberger Von","year":"2016","unstructured":"Von Landesberger T, Brodkorb F, Roskosch P, et al. Mobilitygraphs: visual analysis of mass mobility dynamics via spatio-temporal graphs and clustering. IEEE Trans Vis Comput Graph, 2016, 22: 11\u201320","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR99","doi-asserted-by":"publisher","first-page":"1614","DOI":"10.1109\/TVCG.2014.2346482","volume":"20","author":"J Krause","year":"2014","unstructured":"Krause J, Perer A, Bertini E. Infuse: interactive feature selection for predictive modeling of high dimensional data. IEEE Trans Vis Comput Graph, 2014, 20: 1614\u20131623","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR100","doi-asserted-by":"publisher","first-page":"1633","DOI":"10.1109\/TVCG.2014.2346573","volume":"20","author":"N Mahyar","year":"2014","unstructured":"Mahyar N, Tory M. Supporting communication and coordination in collaborative sensemaking. IEEE Trans Vis Comput Graph, 2014, 20: 1633\u20131642","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR101","doi-asserted-by":"publisher","first-page":"1653","DOI":"10.1109\/TVCG.2014.2346574","volume":"20","author":"C D Stolper","year":"2014","unstructured":"Stolper C D, Perer A, Gotz D. Progressive visual analytics: user-driven visual exploration of in-progress analytics. IEEE Trans Vis Comput Graph, 2014, 20: 1653\u20131662","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR102","doi-asserted-by":"publisher","first-page":"1673","DOI":"10.1109\/TVCG.2014.2346591","volume":"20","author":"P Klemm","year":"2014","unstructured":"Klemm P, Oeltze-Jafra S, Lawonn K, et al. Interactive visual analysis of image-centric cohort study data. IEEE Trans Vis Comput Graph, 2014, 20: 1673\u20131682","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR103","doi-asserted-by":"publisher","first-page":"21","DOI":"10.1109\/TVCG.2015.2468292","volume":"22","author":"S Jang","year":"2016","unstructured":"Jang S, Elmqvist N, Ramani K. Motionflow: visual abstraction and aggregation of sequential patterns in human motion tracking data. IEEE Trans Vis Comput Graph, 2016, 22: 21\u201330","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR104","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1109\/TVCG.2015.2467611","volume":"22","author":"P H Nguyen","year":"2016","unstructured":"Nguyen P H, Xu K, Wheat A, et al. Sensepath: understanding the sensemaking process through analytic provenance. IEEE Trans Vis Comput Graph, 2016, 22: 41\u201350","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR105","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1109\/TVCG.2015.2467871","volume":"22","author":"T Blascheck","year":"2016","unstructured":"Blascheck T, John M, Kurzhals K, et al. Va2: a visual analytics approach for evaluating visual analytics applications. IEEE Trans Vis Comput Graph, 2016, 22: 61\u201370","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR106","doi-asserted-by":"publisher","first-page":"71","DOI":"10.1109\/TVCG.2015.2467555","volume":"22","author":"B C Kwon","year":"2016","unstructured":"Kwon B C, Kim S H, Lee S, et al. Visohc: designing visual analytics for online health communities. IEEE Trans Vis Comput Graph, 2016, 22: 71\u201380","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR107","doi-asserted-by":"publisher","first-page":"101","DOI":"10.1109\/TVCG.2015.2467733","volume":"22","author":"M Glueck","year":"2016","unstructured":"Glueck M, Hamilton P, Chevalier F, et al. Phenoblocks: phenotype comparison visualizations. IEEE Trans Vis Comput Graph, 2016, 22: 101\u2013110","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"428_CR108","doi-asserted-by":"publisher","first-page":"51","DOI":"10.1109\/TVCG.2015.2467613","volume":"22","author":"H Guo","year":"2016","unstructured":"Guo H, Gomez S R, Ziemkiewicz C, et al. A case study using visualization interaction logs and insight metrics to understand how analysts arrive at insights. IEEE Trans Vis Comput Graph, 2016, 22: 51\u201360","journal-title":"IEEE Trans Vis Comput Graph"}],"container-title":["Science China Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-016-0428-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s11432-016-0428-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s11432-016-0428-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,5,3]],"date-time":"2017-05-03T01:12:30Z","timestamp":1493773950000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s11432-016-0428-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,4,24]]},"references-count":108,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2017,12]]}},"alternative-id":["428"],"URL":"https:\/\/doi.org\/10.1007\/s11432-016-0428-2","relation":{},"ISSN":["1674-733X","1869-1919"],"issn-type":[{"value":"1674-733X","type":"print"},{"value":"1869-1919","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,4,24]]},"article-number":"121101"}}