Research on Visualization Systems for DDoS Attack Detection

Computer networks have been widely used and the network security is becoming a critical issue due to the frequent attacks. Among these attacks, the DDoS attack is a destructive attack method, which can cause enormous loss and is difficult to detect. The network administrators work on large volume of traffic data to monitor the DDoS attack. The information visualization method is then introduced to the domain of network security and DDoS attack detection to better comprehend the information behind the multi-dimensional data. Various visualization methods have been proposed to detect the DDoS attack. However, little research has been carried out to give an overview of the existing methods. In this work, we surveyed the literature from 2004 to 2017 concerning network security visualization. We have selected the methods designed for or that can be applied to DDoS attack detection. We have classified these methods and given the advantages and shortcomings of each kind of method. We then proposed the future work in this area, which is aimed at helping the researchers in this area to have a comprehensive view of DDoS visualization.