Two Visual Computer Network Security Monitoring Tools Incorporating Operator Interface Requirements

The critical role of the human operator in security operations has not been a focus of existing tools created by security developers. In this paper we describe interface requirements for usable and effective security operations tools to assess security situational awareness on large and complex computer networks. We have developed two prototype security monitoring tools based on these interface requirements and are progressing on usability studies to evaluate their effectiveness.