Interactive visualization of event logs for cybersecurity

Hidden cyber threats revealed with new visualization software Eventpa

Visualizing abstract events

Because of the complexity of distributed applications, understanding their behaviour is a challenging task. The top-down use of suitable abstraction hierarchies is frequently proposed to manage this complexity. One commonly used abstraction is to group primitive events into abstract events. This paper1 presents events. This representation can easily be included in the process-time diagrams frequently used to depict the behaviour of distributed applications. Such visualizations, in turn, are helpful during the construction, debugging, and monitoring distributed applications as well as in trying to understand old \legacy " code in a program-understanding task. We added such a graphical representation to a prototype distributed debugger. Some examples of the resulting abstract visualization of the execution behaviour are given. These abstract visualizations are essential to minimize the complexity of the understanding process, and support topdown behaviour analyses