%0 Conference Proceedings
%T Comparative Evaluation of Node-Link and Sankey Diagrams for the Cyber Security Domain
%+ Ben-Gurion University of the Negev (BGU)
%+ IBM Cyber Security
%+ University of Haifa [Haifa]
%+ IBM Haifa Research Lab (IBM HRL)
%A Blinder, Rotem
%A Biller, Ofer
%A Even, Adir
%A Sofer, Oded
%A Tractinsky, Noam
%A Lanir, Joel
%A Bak, Peter
%Z Part 7: Cyber Security and E-voting Systems
%< avec comité de lecture
%( Lecture Notes in Computer Science
%B 17th IFIP Conference on Human-Computer Interaction (INTERACT)
%C Paphos, Cyprus
%Y David Lamas
%Y Fernando Loizides
%Y Lennart Nacke
%Y Helen Petrie
%Y Marco Winckler
%Y Panayiotis Zaphiris
%I Springer International Publishing
%3 Human-Computer Interaction – INTERACT 2019
%V LNCS-11746
%N Part I
%P 497-518
%8 2019-09-02
%D 2019
%R 10.1007/978-3-030-29381-9_31
%K Cyber security
%K Visualization
%K Sankey diagram
%Z Computer Science [cs]Conference papers
%X Visualization tools are critical components of cyber security systems allowing analyzers to better understand, detect and prevent security breaches. Security administrators need to understand which users accessed the database and what operations were performed in order to detect irregularities. The current work compares the Sankey diagram with the more commonly used node-link diagram as an alternative visualization technique for cyber security tasks in a controlled experiment. The results indicate, that the Sankey tool showed a consistent advantage in task completion time and was more effective (measured by the percent of correct answers) in synoptic tasks, while the Node-link diagram was more effective in basic, elementary tasks. Further results revealed that performance had only a small effect on user satisfaction and preferences. Our results suggest that the Sankey tool may be a viable option for cyber security visualization tools and strengthens the need to provide personalized visualization tools based on user preferences.
%G English
%Z TC 13
%2 https://inria.hal.science/hal-02544537/document
%2 https://inria.hal.science/hal-02544537/file/486811_1_En_31_Chapter.pdf
%L hal-02544537
%U https://inria.hal.science/hal-02544537
%~ IFIP-LNCS
%~ IFIP
%~ IFIP-TC13
%~ IFIP-INTERACT
%~ IFIP-LNCS-11746