Corporate network security administration is a highly complex job which can easily overload network administrators. Various mechanisms and research have attempted to alleviate this load. This research utilizes design science to provide a novel information visualization mechanism for network security administration. Testing of the system
improves on previous research by utilizing the system in a pseudo-corporate setting within a CDC. System improvements are made utilizing user feedback.
While this research provides a much needed piece to the area of corporate network security, greater research is needed. First, testing of the system in actual production
scenarios is needed. Second, greater testing is required both of a qualitative and quantitative nature. Tests are also necessary to assess actual improvements in decision-making
effectiveness and timeliness with regards to network security administration when utilizing the system.
REFERENCES
Bandura, A. Social foundations of thought and action: A social cognitive theory Prentice- Hall, Englewood Cliffs, NJ, 1986.
Barrett, S., and Konsynski, B. "Inter-Organization Information Sharing Systems," MIS Quarterly (6) 1982, pp 93-105.
Baskerville, R.L., and Myers, M.D. "Information Systems as a Reference Discipline," MIS Quarterly (26:1) 2002, pp 1-14.
Blyth, A., and Kovacich, G.L. Information Assurance: Surviving the Information Environment Springer, London, 2001.
Breitmeyer, B.G. "Parallel processing in human vision: History, review, and critique," in: Applications of Parallel Processing in Vision, J.R. Brannan (ed.), North-Holland, Amsterdam, 1992.
Burke, J.W. Competency Based Education and Training Routledge, 1989.
Chamalese, G., and Pridgen, A. "The Success of the UT IEEE Communications Society," 8th Colloquium for Information Systems Security Education, 2004, pp. 9-12.
Conklin, A. "Cyber Defense Competitions and Information Security Education: An Active Learning Solution for a Capstone Course," Proceedings of the 39th Annual Hawaii International Conference on System Sciences, 2006. HICSS '06, IEEE, 2006, pp. 220b-220b.
Culnan, M.J. "Mapping the Intellectual Structure of MIS, 1980-1985: A Co-Citation Analysis," MIS Quarterly (11:3) 1987, pp 341-353.
Daft, R.L., and Lengel, R.H. "Organizational Information Requirements, Media Richness and Structural Design," Management Science (32:5) 1986, pp 554-571.
Denning, D.E. "An intrusion-detection model," IEEE Transactions on Software Engineering (13:2) 1987, pp 222-232.
Denning, D.E. Information Warfare and Security Addison-Wesley, Reading, MA, 1999. Denning, P.J. "A new social contract for research," Communications of the ACM (40:2) 1997,
pp 132-134.
Dhillon, G., and Backhouse, J. "Information system security management in the new millennium," Communications of the ACM (43:7) 2000, pp 125-128.
Dodge, R.C., and Ragsdale, D.J. "Organized Cyber Defense Competitions," Proceedings of the IEEE International Conference on Advanced Learning Technologies, IEEE Computer Society 2004, pp. 768-770.
DOJ "The Clinton Administration's Policy on Critical Infrastructure Protection: Presidential Decision Directive 63," Retrieved June 29, 2008 from
http://www.usdoj.gov/criminal/cybercrime/white_pr.htm.
Durst, R., Champion, T., Witten, B., Miller, E., and Spagnuolo, L. "Testing and evaluating computer intrusion detection systems," Communications of the ACM (42:7) 1999, pp 53-61.
Few, S. Information Dashboard Design: The Effective Visual Communication of Data O'Reilly Media, Inc., Sebastopol, CA, 2006, p. 211.
Hevner, A.R., March, S.T., Park, J., and Ram, S. "Design Science in Information Systems Research," MIS Quarterly (28:1) 2004, pp 75-105.
Hoffman, L.J., and Ragsdale, D. "Exploring a National Cyber Security Exerc ise for Colleges and Universities," CSPRI-2004-08 & ITOC-TR-04001.
Jacobson, D. "ISEAGE: Internet-Scale Event and Attack Generation Environment," Retrieved June 30, 2008 from http://www.iac.iastate.edu/iseage/.
Jacobson, D., and Evans, N. "Cyber Defense Competition," 2006 ASEE Annual Conference & Exposition: Excellence in Education, 2006.
Kaeo, M. Designing Network Security, (2nd ed.) Cisco Press, Indianapolis, 2003.
Koike, H., Ohno, K., and Koizumi, K. "Visualizing cyber attacks using IP matrix," IEEE Workshop on Visualization for Computer Security, 2005. (VizSEC 05), Minneapolis, MN, 2005, pp. 91-98.
Lippmann, R., and Cunningham, R. "Improving intrusion detection performance using keyword selection and neural networks," Computer networks (34:4) 2000, pp 597- 603.
Luse, A., Scheibe, K.P., and Townsend, A.M. "A Component-Based Framework for Visualization of Intrusion Detection Events," Information Security Journal (17:2) 2008, pp 95-107.
Mackenzie, K.D. "Organization Structures as the Primal Information System," in:
Management of Office Information Systems, S.K. Chang (ed.), Plenum Publishing Corporation, New York, 1984, pp. 27-46.
March, S.T., and Smith, G.F. "Design and natural science research on information technology," Decision Support Systems (15:4) 1995, pp 251-266.
Mennecke, B.E., Crossland, M.D., and Killingsworth, B.L. "Is a Map More than a Picture? The Role of SDSS Technology, Subject Characteristics, and Problem Complexity on Map Reading and Problem Solving," MIS Quarterly (24:4) 2000, pp 601-629. Northcutt, S. Network Intrusion Detection: An Analysis Handbook New Riders Publishing,
Indianapolis, 1999.
NSA "Centers of Academic Excellence," Retrieved March 31, 2008 from http://www.nsa.gov/ia/academia/caeiae.cfm.
Oline, A., and Reiners, D. "Exploring three-dimensional visualization for intrusion
detection," IEEE Workshop on Visualization for Computer Security, 2005. (VizSEC 05), Minneapolis, MN, 2005, pp. 113 - 120.
Orlikowski, W.J., and Lacono, C.S. "Research Commentary: Desperately Seeking the 'IT' in IT Research--A Call to Theorizing the IT Artifact," Information Systems Research (12:2) 2001, pp 121-134.
Proctor, P.E. The practical intrusion detection handbook Prentice-Hall, Upper Saddle River, NJ, 2001.
Richardson, R. "2007 CSI Computer Crime and Security Survey," Computer Security Institute, 2007, pp. 1-28.
Riding, R., and Rayner, S. Cognitive styles and learning strategies David Fulton Publishers, London, 1998.
Royce, W.W. "Managing the Development of Large Software Systems," Proceedings of IEEE WESCON, IEEE, 1970, pp. 1-9.
Schepens, W., Ragsdale, D., and Surdu, J.R. "The Cyber Defense Exercise: An Evaluation of the Effectiveness of Information Assurance Education," The Journal of Information Security (1:2) 2002.
Schepens, W.J., and James, J.R. "Architecture of a Cyber Defense Compeition," IEEE International Conference on Systems, Man and Cybernetics, IEEE, 2003, pp. 4300- 4305.
Shneiderman, B., and Plaisant, C. Designing the User Interface, (4th ed.) Pearson Education, Inc., 2005, p. 652.
Simon, H.A. The Sciences of the Artificial, (3rd ed.) MIT Press, Cambridge, MA, 1996. Stallings, W. Cryptography and Network Security, (4th ed.) Prentice Hall, 2005, p. 592. Stallings, W. Network Security Essentials: Applications and Standards, (3rd ed.) Prentice
Hall, 2006.
Tsichritzis, D. "The Dynamics of Innovation," in: Beyond Calculation: The Next Fifty Years of Computing, P.J. Denning and R.M. Metcalfe (eds.), Copernicus Books, New York, 1998, pp. 259-265.
Venkatesh, V., Morris, M.G., Davis, G.B., and Davis, F.D. "User Acceptance of Information Technology: Toward a Unified View," MIS Quarterly (27:3) 2003, pp 425-478. Verma, D.C. "Simplifying network administration using policy-based management," IEEE
Network (16:2) 2002, pp 20-26.
Vigna, G. "Teaching Hands-On Network Security: Testbeds and Live Exercises," Journal of Information Warfare (3:2) 2003a, pp 8-24.
Vigna, G. "Teaching Network Security Through Live Exercises," 3rd Ann. World Conf. Information Security Education (WISE 3), Kluwer Academic Publishers, 2003b, pp. 3-18.
Walls, J.G., Widmeyer, G.R., and Sawy, O.A.E. "Building an Infomiarion System Design Theory for Vigilant EIS," Information Systems Research (3:1) 1992, pp 36-59. Weber, R. "Editor's Comments: Still Desperately Seeking the IT Artifact," MIS Quarterly
(27:2) 2003, pp iii-xi.
White, G.B., and Williams, D. "The Collegiate Cyber Defense Competition," Proceedings of the 9th Colloquium for Information Systems Security Education (CISSE 05), Georgia Institute of Technology, 2005, pp. 26-31.
WinPcap "WinPcap: The Windows Packet Capture Library," Retrieved June 25, 2008 from http://www.winpcap.org/default.htm.
Zhu, D., Premkumar, G., Zhang, X., and Chu, C.-H. "Data Mining for Network Intrusion Detection: A Comparison of Alternative Methods," Decision Sciences (32:4) 2001, pp 635-660.