Jaime Blasco Blog : /Security Visualization

Realtime Ossim Ntop Sessions visualization
Mon, 25 Aug 2008

I've been developing a flex application that parse Ntop connections Data and shows a graphical interface to navigate throught the host and connections information.
- Click Node label to show Host Info
- Click box connector to show connection info

posted at: 12:53 | path: /Security Visualization | permanent link to this entry | 1 comments | ossim,flex,flash,security visualization, ntop

Raffy Presentation about security visualiztion at SOURCE Boston 2008
Sat, 23 Aug 2008

Here is a video of Raffael Marty's presentation about security visualization at SOURCE Boston 2008 conference:

posted at: 15:53 | path: /Security Visualization | permanent link to this entry | 0 comments | security visualization

Ossim Data Visualization
Sat, 23 Aug 2008

I'm making an effort to develop some different ways of visualizating OSSIM events and alerts. Here are some examples of my research:

posted at: 13:51 | path: /Security Visualization | permanent link to this entry | 0 comments | ossim,flex,flash,security visualization

3d Nmap
Wed, 20 Aug 2008

Here is a screenshot of a project I'm working on. The tool parse XML nmap scan files and shows an interactive 3d environment where you can inspect nmap scanning results. I´m developing with XNA (C#). I'll will publish the code as soon as I fix some errors.

posted at: 21:45 | path: /Security Visualization | permanent link to this entry | 0 comments | nmap,3d,security visualization

An approach to malware collection log visualization
Wed, 06 Aug 2008

I have just published an article related to malware collection log visualization. The paper focus on visualization of Nepenthes logs using AfterGlow. In the paper you can find information about correlation ips with countries and binary files with ClamAV signatures with the goal of generating interesting graphs. Get it here

posted at: 11:47 | path: /Security Visualization/Malware | permanent link to this entry | 1 comments | malware,security visualization, log analysis

Visualization of Api calls and Imported symbols of malware binary files
Wed, 06 Aug 2008

I'm developing a tool to extract interesting information from malware files with the goal of generating a relation graph. The tool extract api calls and imported symbols of binary files, I´ve make some interesting graph from malware files collected by Nepenthes.
::read more

posted at: 11:46 | path: /Security Visualization/Malware | permanent link to this entry | 0 comments | visualization, malware