A Framework for Context-Aware Visualization in Cyber Defense

We present a conceptual framework for selecting and evaluating visualizations that support network vulnerability identification and classification. We examined the relationships between network vulnerabilities and the tasks of network defenders to identify visualizations that facilitate reasoning and critical thinking processes across abstraction levels – i.e., from tabular representation to figurative graphical representation to geometric graphical representation. Contextual factors provide additional characterizations that guide the selection and evaluation process. This framework is intended to: (1) aid designers, developers, and researchers when creating and testing visualizations included in cyber security tools and (2) aid trainers and network defenders trying to understand how or why certain visualizations are more suited for specific purposes.