{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:53:44Z","timestamp":1750308824012,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":31,"publisher":"ACM","license":[{"start":{"date-parts":[[2010,9,14]],"date-time":"2010-09-14T00:00:00Z","timestamp":1284422400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2010,9,14]]},"DOI":"10.1145\/1850795.1850799","type":"proceedings-article","created":{"date-parts":[[2010,9,2]],"date-time":"2010-09-02T13:14:34Z","timestamp":1283433274000},"page":"34-45","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":19,"title":["Visualizing graph dynamics and similarity for enterprise network security and management"],"prefix":"10.1145","author":[{"given":"Qi","family":"Liao","sequence":"first","affiliation":[{"name":"University of Notre Dame, Notre Dame, Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aaron","family":"Striegel","sequence":"additional","affiliation":[{"name":"University of Notre Dame, Notre Dame, Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nitesh","family":"Chawla","sequence":"additional","affiliation":[{"name":"University of Notre Dame, Notre Dame, Indiana"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2010,9,14]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCG.2006.31"},{"key":"e_1_3_2_1_2_1","unstructured":"Gregory Conti. Rumint -- open source network and security visualization tool. http:\/\/www.rumint.org.  Gregory Conti. Rumint -- open source network and security visualization tool. http:\/\/www.rumint.org."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85933-8_14"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85933-8_11"},{"key":"e_1_3_2_1_5_1","first-page":"85","volume-title":"Proc. of Workshop on Visualization for Computer Security (VizSEC '07)","author":"Phan D.","year":"2007","unstructured":"D. Phan , J. Gerth , M. Lee , A. Paepcke , and T. Winograd . Visual analysis of network flow data with timelines and event plots . In Proc. of Workshop on Visualization for Computer Security (VizSEC '07) , pages 85 -- 99 , Sacramento, CA, Octoboer 29 2007 . D. Phan, J. Gerth, M. Lee, A. Paepcke, and T. Winograd. Visual analysis of network flow data with timelines and event plots. In Proc. of Workshop on Visualization for Computer Security (VizSEC '07), pages 85--99, Sacramento, CA, Octoboer 29 2007."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029208.1029219"},{"key":"e_1_3_2_1_7_1","first-page":"16","volume-title":"Proc. of 19th Large Installation System Administration Conference (LISA '05)","author":"Yurcik W.","year":"2005","unstructured":"W. Yurcik . Visualizing netflows for security at line speed: The SIFT tool suite . In Proc. of 19th Large Installation System Administration Conference (LISA '05) , page 16 , San Diego, CA , December 4-9 2005 . W. Yurcik. Visualizing netflows for security at line speed: The SIFT tool suite. In Proc. of 19th Large Installation System Administration Conference (LISA '05), page 16, San Diego, CA, December 4-9 2005."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1179576.1179596"},{"key":"e_1_3_2_1_9_1","first-page":"115","volume-title":"Proc. of Workshop on Visualization for Computer Security (VizSec'07)","author":"Lalanne D.","year":"2007","unstructured":"D. Lalanne , E. Bertini , P. Hertzog , and P. Bados . Visual analysis of corporate network intelligence: Abstracting and reasoning on yesterdays for acting today . In Proc. of Workshop on Visualization for Computer Security (VizSec'07) , pages 115 -- 130 , Sacramento, CA , October 29 2007 . D. Lalanne, E. Bertini, P. Hertzog, and P. Bados. Visual analysis of corporate network intelligence: Abstracting and reasoning on yesterdays for acting today. In Proc. of Workshop on Visualization for Computer Security (VizSec'07), pages 115--130, Sacramento, CA, October 29 2007."},{"key":"e_1_3_2_1_10_1","first-page":"59","volume-title":"Proc. of the USENIX 22nd Large Installation System Administration Conference (LISA '08)","author":"Liao Q.","year":"2008","unstructured":"Q. Liao , A. Blaich , A. Striegel , and D. Thain . ENAVis: Enterprise network activities visualization . In Proc. of the USENIX 22nd Large Installation System Administration Conference (LISA '08) , pages 59 -- 74 , San Diego, CA , November 9-14 2008 . Q. Liao, A. Blaich, A. Striegel, and D. Thain. ENAVis: Enterprise network activities visualization. In Proc. of the USENIX 22nd Large Installation System Administration Conference (LISA '08), pages 59--74, San Diego, CA, November 9-14 2008."},{"key":"e_1_3_2_1_11_1","first-page":"187","volume-title":"Graph Based Representations in Pattern Recognition","author":"Schenker A.","year":"2003","unstructured":"A. Schenker , M. Last , H. Bunke , and A. Kandel . Comparison of distance measures for graph-based clustering of documents . In Graph Based Representations in Pattern Recognition , Springer LNCS , volume 2726 , pages 187 -- 263 , 2003 . A. Schenker, M. Last, H. Bunke, and A. Kandel. Comparison of distance measures for graph-based clustering of documents. In Graph Based Representations in Pattern Recognition, Springer LNCS, volume 2726, pages 187--263, 2003."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-8655(97)00179-7"},{"key":"e_1_3_2_1_13_1","volume-title":"A Graph-Theoretic Approach to Enterprise Network Dynamics (Progress in Computer Science and Applied Logic (PCS))","author":"Bunke H.","year":"2007","unstructured":"H. Bunke , P. J. Dickinson , M. Kraetzl , and W. D. Wallis . A Graph-Theoretic Approach to Enterprise Network Dynamics (Progress in Computer Science and Applied Logic (PCS)) , volume 24 . A Birkh\u00e4user Boston book, 2007 . H. Bunke, P. J. Dickinson, M. Kraetzl, and W. D. Wallis. A Graph-Theoretic Approach to Enterprise Network Dynamics (Progress in Computer Science and Applied Logic (PCS)), volume 24. A Birkh\u00e4user Boston book, 2007."},{"key":"e_1_3_2_1_14_1","volume-title":"Multidimensional Scaling","author":"Cox T. F.","year":"2000","unstructured":"T. F. Cox and M. A. A. Cox . Multidimensional Scaling , Second Edition. Chapman & amp; Hall\/CRC, September 2000 . T. F. Cox and M. A. A. Cox. Multidimensional Scaling, Second Edition. Chapman & Hall\/CRC, September 2000."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","first-page":"227","DOI":"10.1007\/978-3-540-68020-8_9","volume-title":"Applied Graph Theory in Computer Vision and Pattern Recognition","author":"Bunke H.","year":"2007","unstructured":"H. Bunke , P. Dickinson , A. Humm , Ch. Irniger , and M. Kraetzl . Applied Graph Theory in Computer Vision and Pattern Recognition , volume 52 , chapter Graph Sequence Visualisation and its Application to Computer Network Monitoring and Abnormal Event Detection, pages 227 -- 245 . Springer Berlin \/ Heidelberg , 2007 . H. Bunke, P. Dickinson, A. Humm, Ch. Irniger, and M. Kraetzl. Applied Graph Theory in Computer Vision and Pattern Recognition, volume 52, chapter Graph Sequence Visualisation and its Application to Computer Network Monitoring and Abnormal Event Detection, pages 227--245. Springer Berlin \/ Heidelberg, 2007."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.7155\/jgaa.00124"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.physrep.2009.11.002"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1971.10482356"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.78.016108"},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.v17:2\/4"},{"key":"e_1_3_2_1_21_1","volume-title":"Applied Security Visualization","author":"Marty R.","year":"2008","unstructured":"R. Marty . Applied Security Visualization . Addison Wesley Professional , 2008 . R. Marty. Applied Security Visualization. Addison Wesley Professional, 2008."},{"key":"e_1_3_2_1_22_1","volume-title":"Security visualization: What you don't see can hurt you","author":"McRee R.","year":"2008","unstructured":"R. McRee . Security visualization: What you don't see can hurt you . Information Systems Security Association (ISSA) Journal , June 2008 . R. McRee. Security visualization: What you don't see can hurt you. Information Systems Security Association (ISSA) Journal, June 2008."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/1516595.1516626"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1029208.1029220"},{"key":"e_1_3_2_1_25_1","volume-title":"Proc. of Workshop on Visualisation for Computer Security (VizSec'07)","author":"Irwin B. V. W.","year":"2007","unstructured":"B. V. W. Irwin and J. P. Riel . Inetvis: a graphical aid for the detection and visualisation of network scans . In Proc. of Workshop on Visualisation for Computer Security (VizSec'07) , Sacramento, CA , October 29 2007 . B. V. W. Irwin and J. P. Riel. Inetvis: a graphical aid for the detection and visualisation of network scans. In Proc. of Workshop on Visualisation for Computer Security (VizSec'07), Sacramento, CA, October 29 2007."},{"key":"e_1_3_2_1_26_1","first-page":"30","volume-title":"Proc. of the 2002 IEEE Workshop on Information Assurance and Security","author":"Abdullah K.","year":"2002","unstructured":"K. Abdullah , C. Lee , G. Conti , and J. A. Copeland . Visualizing network data for intrusion detection . In Proc. of the 2002 IEEE Workshop on Information Assurance and Security , pages 30 -- 38 , United States Military Academy, West Point, NY , June 17-19 2002 . K. Abdullah, C. Lee, G. Conti, and J. A. Copeland. Visualizing network data for intrusion detection. In Proc. of the 2002 IEEE Workshop on Information Assurance and Security, pages 30--38, United States Military Academy, West Point, NY, June 17-19 2002."},{"key":"e_1_3_2_1_27_1","first-page":"187","volume-title":"Proc. of Workshop on Visualization for Computer Security (VizSec'07)","author":"Mansmann F.","year":"2007","unstructured":"F. Mansmann , L. Meier , and D. Keim . Graph-based monitoring of host behavior for network security . In Proc. of Workshop on Visualization for Computer Security (VizSec'07) , pages 187 -- 202 , Sacramento, CA , October 29 2007 . F. Mansmann, L. Meier, and D. Keim. Graph-based monitoring of host behavior for network security. In Proc. of Workshop on Visualization for Computer Security (VizSec'07), pages 187--202, Sacramento, CA, October 29 2007."},{"key":"e_1_3_2_1_28_1","first-page":"51","volume-title":"Proc. of RAID 2000 Third International Workshop on the Recent Advances in Intrusion Detection","author":"Tolle J.","year":"2000","unstructured":"J. Tolle and O. Niggemann . Supporting intrusion detection by graph clustering and graph drawing . In Proc. of RAID 2000 Third International Workshop on the Recent Advances in Intrusion Detection , pages 51 -- 62 , Toulouse, France , October 2-4 2000 . J. Tolle and O. Niggemann. Supporting intrusion detection by graph clustering and graph drawing. In Proc. of RAID 2000 Third International Workshop on the Recent Advances in Intrusion Detection, pages 51--62, Toulouse, France, October 2-4 2000."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/VIZSEC.2005.7"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/38.974517"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECCOMW.2006.359582"}],"event":{"name":"VizSec '10: 7th International Symposium on Visualization for Cyber Security","acronym":"VizSec '10","location":"Ottawa Ontario Canada"},"container-title":["Proceedings of the Seventh International Symposium on Visualization for Cyber Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1850795.1850799","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1850795.1850799","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T20:26:50Z","timestamp":1750278410000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1850795.1850799"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2010,9,14]]},"references-count":31,"alternative-id":["10.1145\/1850795.1850799","10.1145\/1850795"],"URL":"https:\/\/doi.org\/10.1145\/1850795.1850799","relation":{},"subject":[],"published":{"date-parts":[[2010,9,14]]},"assertion":[{"value":"2010-09-14","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}