To address the unique requirements of cyber Command and Control (C2), new visualization methods are needed to
provide situation awareness and decision support within the cyber domain. A key challenge is the complexity of relevant
data: it is immense and multidimensional, includes streaming and log data, and comes from multiple, disparate
applications and devices. Decision makers must be afforded a view of a) the current state of the cyber battlespace, b)
enemy and friendly capabilities and vulnerabilities, c) correlations between cyber events, and d) potential effects of
alternative courses of action within cyberspace. In this paper we present requirements and designs for Visualization for
Integrated Cyber Command and Control (VIC3).
Visualization tools for cyber security often overlook related research from the information visualization domain. Cyber
security data sets are notoriously large, yet many of the popular analysis tools use 3D techniques and parallel coordinates
which have been shown to suffer issues of occlusion when applied to large data sets1,2. While techniques exist to
ameliorate these issues they are typically not used. In this paper we evaluate several cyber security visualization tools
based on established design principles and human-computer interaction research. We conclude by enumerating
challenges, requirements, and recommendations for future work.
To support an Effects Based Approach to Operations (EBAO), Intelligence, Surveillance, and Reconnaissance (ISR)
planners must optimize collection plans within an evolving battlespace. A need exists for a decision support tool that
allows ISR planners to rapidly generate and rehearse high-performing ISR plans that balance multiple objectives and
constraints to address dynamic collection requirements for assessment. To meet this need we have designed an
evolutionary algorithm (EA)-based "Integrated ISR Plan Analysis and Rehearsal System" (I2PARS) to support Effects-based
Assessment (EBA). I2PARS supports ISR mission planning and dynamic replanning to coordinate assets and
optimize their routes, allocation and tasking. It uses an evolutionary algorithm to address the large parametric space of
route-finding problems which is sometimes discontinuous in the ISR domain because of conflicting objectives such as
minimizing asset utilization yet maximizing ISR coverage. EAs are uniquely suited for generating solutions in dynamic
environments and also allow user feedback. They are therefore ideal for "streaming optimization" and dynamic
replanning of ISR mission plans. I2PARS uses the Non-dominated Sorting Genetic Algorithm (NSGA-II) to
automatically generate a diverse set of high performing collection plans given multiple objectives, constraints, and
assets. Intended end users of I2PARS include ISR planners in the Combined Air Operations Centers and Joint
Intelligence Centers. Here we show the feasibility of applying the NSGA-II algorithm and EAs in general to the ISR
planning domain. Unique genetic representations and operators for optimization within the ISR domain are presented
along with multi-objective optimization criteria for ISR planning. Promising results of the I2PARS architecture design,
early software prototype, and limited domain testing of the new algorithm are discussed. We also present plans for future
research and development, as well as technology transition goals.
The combination of pixelization and dimensional stacking uniquely facilitates the visualization and analysis of
large, multidimensional databases. Pixelization is the mapping of each data point in some set to a pixel in a 2D
image. Dimensional stacking is a layout method where N dimensions are projected onto the axes of an information
display. We have combined and expanded upon both methods in an application named NeuroVis that supports
interactive, visual data mining. Users can spontaneously perform ad hoc queries, cluster the results through
dimension reordering, and execute analyses on selected pixels. While NeuroVis is not intrinsically restricted to
any particular database, it is named after its original function: the examination of a vast neuroscience database.
Images produced from its approaches have now appeared in the Journal of Neurophysiology and NeuroVis itself
is being used for educational purposes in neuroscience classes at Emory University. In this paper we detail the
theoretical foundations of NeuroVis, the interaction techniques it supports, an informal evaluation of how it has
been used in neuroscience investigations, and a generalization of its utility and limitations in other domains.
Access to the requested content is limited to institutions that have purchased or subscribe to SPIE eBooks.
You are receiving this notice because your organization may not have SPIE eBooks access.*
*Shibboleth/Open Athens users─please
sign in
to access your institution's subscriptions.
To obtain this item, you may purchase the complete book in print or electronic format on
SPIE.org.
INSTITUTIONAL Select your institution to access the SPIE Digital Library.
PERSONAL Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.