3D anomaly bar visualization for large-scale network: VAST 2012 Mini Challenge #1

In this VAST challenge, log data coming from locations all over the Bank of Money facilities that contains close one million IP addresses. Since the geography of the data plays an important role for potential anomalies detection, we present a particular visualization solution based on Google Earth that can provide measure and deal with geo-spatial data. By mapping three important attributes, i.e., number of connections, policy status and activity flag, into 3D bars on top of physical locations (coordinates), anomaly distribution and trends can be efficiently visualized and analyzed. The general KML file generator can be extended for further analysis on other GIS systems.