NIMBLE IBM Research

Analysts engaged in real-time monitoring of cybersecurity incidents must quickly and accurately respond to alerts generated by intrusion detection systems. The NIMBLE (Network Intrusion Management Benefiting from Learned Expertise) project explores visualization and defensible recommendations as analysis aids.

Collaborators

Steven I. Ross, Daniel M. Gruen, Kate Ehrlich, Susanna E. Kirk, and John F. Patterson

Technologies

Java and Piccolo2D

Related Publications

Kate Ehrlich, Susanna E. Kirk, John F. Patterson, Jamie C. Rasmussen, Steven I. Ross, and Daniel M. Gruen. Taking advice from intelligent systems: the double-edged sword of explanations. Proceedings of the 16th International Conference on Intelligent User Interfaces (IUI). 2011.
Jamie C. Rasmussen, Kate Ehrlich, Steven I. Ross, Susanna E. Kirk, Daniel M. Gruen, and John F. Patterson. Nimble Cybersecurity Incident Management through Visualization and Defensible Recommendations. In Proceedings of the Seventh International Symposium on Visualization for Cyber Security (VizSec). 2010.
Best Long Paper Award