NICT Daedalus visualises online attacks in 3D

Today's cyber-attacks breach boundary defenses from inside and outside organizations, including the spread of malware via USB memory sticks and mail attachments, as well as zero-day exploits. So, using Daedalus together with conventional boundary systems is expected to improve network security within organizations.

"The blue part in this organization shows IP addresses that are used, and the black part shows addresses that are not used. This character indicates an alert. When you click on the alert, a message showing the cause appears. In this case, only two packets have been sent. But because the packets go from an address that's used to an address that's not used, this indicates that a virus is starting to spread within the organization."

"If this kind of situation is input to our observation network, we can observe it, and find out things like that. The system automatically sends an alert, saying, 'This IP address of yours is spreading a virus using this protocol at this time'."