visual correlation for situational awareness yarden livnat phd sci institute university of utah
TRANSCRIPT
![Page 1: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/1.jpg)
Visual Correlation for Situational Awareness
Yarden Livnat PhD
SCI Institute
University of Utah
![Page 2: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/2.jpg)
ApproachIncorporates human judgment
Global and Local perspectives
Suggestive visualization
VisAlert: Network Intrusion Detection
ARDA and Air Force Research Lab
Infectious Disease Weather Map
![Page 3: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/3.jpg)
Situational Awareness
VisAlert - Network intrusion detection - ARDA and Air Force Research Lab
CommonGround - Infectious disease weather map- US Army TATRC (Telemedicine & Advance Research Center)
Epinome - Visual analytics workbench for investigation of infectious disease outbreaks- CDC Rocky Mountain Center of Excellence in Public Health Informatics
![Page 4: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/4.jpg)
Vs.
VisAlert
Traditional VisAlert
Visual correlation of network intrusion alerts
Disparate sources, heterogeneous data
The w3 premise- What- When- Where
![Page 5: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/5.jpg)
VisAlertGlobal view with local detailsLocal view within a global context
Context Detail on demand
![Page 6: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/6.jpg)
Application of the VisAlert paradigm
to other domains
![Page 7: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/7.jpg)
VisAwareBioWatch - BioWatch sensors, Geographic Locations
![Page 8: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/8.jpg)
VisAwareEmergency Response
Mapping multiple domains• Events• Resources• States• etc…
![Page 9: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/9.jpg)
Interactive Visual Data Mining
Election results
Evolving investigationover network graphs
![Page 10: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/10.jpg)
Infectious Disease Weather MapAn Interactive Visual Exploration of Temporal Correlations
CommonGround
![Page 11: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/11.jpg)
CommonGround
CommonGround:Qualitative visualization
Current visualization:Quantitative and GIS
![Page 12: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/12.jpg)
Whiteboard illustration of mental model map of influenza activity
The User Mental Model
Graphical cues:
Glyphs, size, clustering, relations, correlations, annotations
![Page 13: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/13.jpg)
CommonGround
![Page 14: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/14.jpg)
CommonGround:Cryptosporidium Outbreak
First appearance of Cryptosporidium
Mix of enteric pathogens more prominent Cryptosporidium
Cryptosporidium outbreak peak
Week of 7/1/2007 Week of 8/5/2007 Week of 8/26/2007
![Page 15: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/15.jpg)
Epinome
An interactive web-based visual analytic workbench
Facilitate infectious disease outbreak investigation
![Page 16: Visual Correlation for Situational Awareness Yarden Livnat PhD SCI Institute University of Utah](https://reader036.vdocuments.site/reader036/viewer/2022062322/5697c01b1a28abf838ccf71d/html5/thumbnails/16.jpg)
Epinome
“How to get the software out of the way”
Focus of the discourse between the user and the data
Multiple coordinated views
Direct interaction with the data
Supports multiple lines of thought