IMaps: Visualizing the Internet AS Toplogy using a Geographic Map Metaphor

We present a novel technique, IMaps, for visualizing the Internet topology based on Autonomous System (AS) connections and analyzing traffic metrics and anomalies. The main component of this visualization technique is a geographic-like map that depicts the AS topology. This map represents world countries as contiguous regions of the plane, and ASes and their connections with a node-link diagram. Shape, dimension and boundaries of the countries do not reflect geography, but rather analogue characteristics in the Internet space. Heatmaps are then overlaid to visualize various types of dynamic data, such as aggregate network activity statistics. To analyze AS nodes and detect network anomalies, IP traffic is aggregated into AS nodes and we employ analysis per-AS, so results (and AS heatmap colors) indicate the presence (or not) of anomalies per AS.

Vizsec Poster
Enabling visualization of cyber-attacks can help in defending our digital lives. Internet visualizations are complex and difficult to understand. IMap provides a simple visualization of the Internet structure and malicious activities using a geographic-like representation of the digital world.