Comparative Evaluation of Node-Link and Sankey Diagrams for the Cyber Security Domain

Rotem Blinder, Ofer Biller, Adir Even, Oded Sofer, Noam Tractinsky, Joel Lanir, Peter Bak

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

2 Scopus citations

Abstract

Visualization tools are critical components of cyber security systems allowing analyzers to better understand, detect and prevent security breaches. Security administrators need to understand which users accessed the database and what operations were performed in order to detect irregularities. The current work compares the Sankey diagram with the more commonly used node-link diagram as an alternative visualization technique for cyber security tasks in a controlled experiment. The results indicate, that the Sankey tool showed a consistent advantage in task completion time and was more effective (measured by the percent of correct answers) in synoptic tasks, while the Node-link diagram was more effective in basic, elementary tasks. Further results revealed that performance had only a small effect on user satisfaction and preferences. Our results suggest that the Sankey tool may be a viable option for cyber security visualization tools and strengthens the need to provide personalized visualization tools based on user preferences.

Original languageEnglish
Title of host publicationHuman-Computer Interaction – INTERACT 2019 - 17th IFIP TC 13 International Conference, Proceedings
EditorsDavid Lamas, Fernando Loizides, Lennart Nacke, Helen Petrie, Marco Winckler, Panayiotis Zaphiris
PublisherSpringer Verlag
Pages497-518
Number of pages22
ISBN (Print)9783030293802
DOIs
StatePublished - 1 Jan 2019
Event17th IFIP TC13 International Conference on Human-Computer Interaction, INTERACT 2019 - Paphos, Cyprus
Duration: 2 Sep 20196 Sep 2019

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume11746 LNCS
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

Conference17th IFIP TC13 International Conference on Human-Computer Interaction, INTERACT 2019
Country/TerritoryCyprus
CityPaphos
Period2/09/196/09/19

Keywords

  • Cyber security
  • Sankey diagram
  • Visualization

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science (all)

Fingerprint

Dive into the research topics of 'Comparative Evaluation of Node-Link and Sankey Diagrams for the Cyber Security Domain'. Together they form a unique fingerprint.

Cite this