Slashdot Mirror


Redefining Security Visualization With Hollywood UI Design

An anonymous reader writes: Most security interfaces today leave a lot to be desired, and many security pros are gaming enthusiasts, accustomed to a sharp and engaging virtual world. ProtectWise CEO Scott Chasin and CTO Gene Stevens wanted to give them a helpful security tool with an interactive visual dashboard that looks straight out of Call of Duty. The UI is called ProtectWise Visualizer, and its creator is Jake Sargeant, FX pro and a visual designer at MN8 Studio. If his name sounds familiar, it's because he was the Lead Animated Graphics Artist for the movie TRON: Legacy. There's plenty of inspiration available for movie-style UIs; the problem with much of it is that not everyone likes an interface that looks like an especially busy video game.

55 comments

  1. Finally ... by gstoddart · · Score: 0, Troll

    I've been saying for years software companies should be taking the lead of the UIs we see in the movies.

    They often look better designed and convey more information than some of real GUIs I see.

    That's a really clean looking dashboard in my opinion.

    --
    Lost at C:>. Found at C.
    1. Re:Finally ... by Anonymous Coward · · Score: 1

      You can do all this in Visual Basic.

    2. Re:Finally ... by gstoddart · · Score: 1

      You can do all this in Visual Basic.

      I honestly don't care what you implement it in.

      But I've seen a fair few things which are supposed to be dashboards but which don't do a good job of conveying the information quickly.

      It seems like when they design the fancy ones for Hollywood you can look at it and get a real sense of what it is telling you. Obviously they're not real, but it seems like the FX guys just design stuff that looks like it would be useful.

      --
      Lost at C:>. Found at C.
    3. Re:Finally ... by Anonymous Coward · · Score: 0

      That's because most software projects let the programmers design the interface. Programmers are not graphic designers.

    4. Re:Finally ... by andrewa · · Score: 2

      whooosh....

      --
      :(){ :|:& };:
    5. Re:Finally ... by gstoddart · · Score: 1

      Oh, apparently I stepped on a meme without realizing it.

      Thanks for the whoosh. ;-)

      --
      Lost at C:>. Found at C.
    6. Re:Finally ... by MobileTatsu-NJG · · Score: 2

      I've been saying for years software companies should be taking the lead of the UIs we see in the movies.

      They often look better designed and convey more information than some of real GUIs I see.

      There's a reason for that. The job of an artist designing ANYTHING for a movie/TV Show/video game is to make sure the audience understands what they're seeing in a very short amount of time. For example: You can make a filming location in California look like Miami just by getting the streets wet, implying that it rained recently. Little things like that. That's why computer UIs use 72p fonts, the sound of lightning happens at the same time its visible, and there is sound in space.

      So, yes, even if Hollywood does make us chuckle from time to time, there is something to be said for "communicating clearly", and there's always something for software design to learn from that approach.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    7. Re:Finally ... by Darinbob · · Score: 2

      Really? We rarely get a good look at movie UIs, they're flashed by too quickly. They may look cool but if you do pause the screen and look there's nothing to them really. Looking cool is not a good metric for usability.

    8. Re:Finally ... by BradleyUffner · · Score: 1

      Oh, apparently I stepped on a meme without realizing it.

      Thanks for the whoosh. ;-)

      https://www.youtube.com/watch?...

    9. Re:Finally ... by Jawnn · · Score: 2

      I've been saying for years software companies should be taking the lead of the UIs we see in the movies.

      They often look better designed and convey more information than some of real GUIs I see.

      That's a really clean looking dashboard in my opinion.

      Yeah, because shiny beats the hell out of "works", right? Look, I'm a big fan of good UI design, and most products leave a lot to be desired, but please do not make the mistake of thinking that looks makes up for function or performance.

    10. Re:Finally ... by theskipper · · Score: 1

      Yeah, that's why you should always "Bing it!" first.

    11. Re:Finally ... by Hognoxious · · Score: 1

      Graphic designers aren't UI designers either. I reckon they're even worse at it than programmers

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    12. Re:Finally ... by gl4ss · · Score: 1

      not quite sure about that.

      the other half the time the stuff being on computer screens is just meant to look like busy garbage.

      tron is entirely just meant to look pretty.
      I mean fuck, check out this link http://cdn.jtn.im/178/TRON_GFX...

      sure, it's pretty. but where are you going to see that your ports are being scanned?

      --
      world was created 5 seconds before this post as it is.
  2. fix it first by Anonymous Coward · · Score: 5, Insightful

    Lets start by fixing all of the broken "security" mechanisms, then move on to adding a bunch of useless bells and whistles to your monitoring suit. I looked at the UI. It's a fucking ugly mess and in no way would benefit my work, in fact it would make it harder because I'll have to figure out the cheat codes.

    the internet isn't tron, it's not 3d buildings with packets flying around. We don't need to Jazz up the interface, we need to repair all of the damage that has been done, this doesn't help that at all.

    What it does do though, is make your security guy feel really special because he's got this epic whiz bang interface with pie charts and graphs and lots of blinking lights.

    True security is done in logs.

    1. Re:fix it first by gtall · · Score: 1

      That and this: security is notorious for being unmeasurable. How much security do I get if I spend $x? The biggest problem is the black swan problem. I stop 99.9999% of all attempts to break in, but the one I do let in completely exfiltrate all my data. Worse, little data here, a little data there, and sooner or later I have real information about your operation. It is hard to add data together to figure out what information the interloper got. If I exfiltrate a single bit, I have...errr...a bit. However, if I know that 0 means Donald Trump's hair is a weasel with eyes, and 1 means his hair is a creature from the planet Pluton, and I exfiltrate the bit, then I know much more.

      So can the pie charts, and blinky lights, only PHBs will think them important.

    2. Re:fix it first by Mantrid42 · · Score: 1

      Lets start by fixing all of the broken "security" mechanisms

      There's no fixing human stupidity.

    3. Re:fix it first by VorpalRodent · · Score: 1

      if I know that 0 means Donald Trump's hair is a weasel with eyes, and 1 means his hair is a creature from the planet Pluton

      This is why writing in binary is painful for most people to imagine.

      --
      Take it to the limit, everybody to the limit, come on, everybody fhqwhgads.
    4. Re:fix it first by Anonymous Coward · · Score: 0

      I've been to a commercial network monitoring provider's SOC and their flat screen televisions are almost entirely for the benefit of customer dog and pony shows.

      For most visiting firemen, these TVs are mounted on the wall to entertain their imaginations/match their expectation set by watching Star Trek/James Bond Goldeneye/Eagle Eye/Bourne Supremacy/etc.

      To the laymen, a Cyberwarfare "Command Center" is a room full of analysts watching screens like Mission Control from NASA/Houston in Apollo 13.

      The more worker bee's warming swivel chairs with their ass in collared shirts the more "professional" the operation. It's all just theater obviously.

      REAL security is based on architecture first, then access controls, compartmentalization, encryption, and procedures second. The "Command Center"/enterprise Bridge is all for "Oh shit!" clusterfuck mitigation(closing the barn door after the cows has already left).

      This visualization tool very effectively does what it was designed to do: baffle purchasing agents with bullshit.

      I like this one myself: http://www.securitywizardry.com/radar.htm

      Very "Wargames"/James Bond!

    5. Re:fix it first by mlts · · Score: 2

      There is some merit to a status display at a glance, just to see alerts. However, there are a ton of things that need to be in for thought:

      1: The alerts have to be meaningful. I've worked with more alerting programs than I care to remember (Netview, OpenView, Bit Brother, hobbit, SCOM, SCVMM, vSphere, xymon, Splunk, SenSage, SolarWinds, tripwire and many other), and the biggest problem with all of them is having them hand you alerts that actually matter. A status screen always glowing red because some development server has some glitch with a driver is pointless, and makes the display worthless. Similar with alerts from vSphere. Setting CPU overuse alarms that some VM that nobody gives a rat's ass about, is just a waste of time.

      Even things like disk array warnings can be meaningless. I have encountered equipment that always had its disk array throwing exceptions and soft-failing disks.

      Configuring this to be meaningful is the tough part. Alerts with a 10 pucker factor at a bank (Oracle RAC cluster down to one node) may wind up having a PF of 0 over at a development site where they only have one node to start out with.

      I learned this with Splunk dashboards. One person just may not care that some machines have high RAM usage. Another person might be highly concerned because RAM provides a fast cache for reads.

      2: The alerts have to have proper severity. Not everything that shows up needs to be a double-plus-flashing-red alert. There are items that are warnings, notices, or even debug messages that can pop up, which are extremely notable.

      3: The alerts have to show something useful. Random icons turning red don't mean much unless there is a way to expand exactly to what it means, what is affected, when did this happen, and so on.

      In reality, instead of having some display with some Hollywood-esque graphic on it, just give all the IT people another monitor and a customizable dashboard panel. This does the same function, and will wind up being far more useful than something graphical just for graphics's sake.

    6. Re:fix it first by blincoln · · Score: 1

      "True security is done in logs."

      When your systems are generating multiple gigabytes of log data every day, you need some sort of system to turn that mass of raw data into useful information. I don't know that this system does that, but we're about ten years past the point of manual log review being a viable primary method for handling security.

      --
      "...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
    7. Re:fix it first by Anonymous Coward · · Score: 0

      Given the display... How did it determine those priority events?
      How does it know how much web traffic and encrypted traffic is flowing?
      What is included in the encrypted traffic? (HTTPS? VPN? SSH? Malware C&C?)
      Based upon this dashboard, this company should block all traffic outside of North America and Europe. It clearly shows that the traffic they have concentrates there and everywhere else is non-existent or malicious. Is the information on this dashboard accurate and precise enough to validly and confidently take such a step without repercussions?
      What does the killbox do? Does it authorize the deployment of offensive weapon systems to destroy your attacker like the nomenclature implies? Is that legal?

      If all of these things actually worked, this could be a nice tool to help visualize ongoing attacks. If it had a history feature, it could be used for training.

    8. Re:fix it first by digitalPhant0m · · Score: 1

      epic whiz bang interface with pie charts and graphs and lots of blinking lights.

      Executives eat this shit up.

      This is exactly what they did in my company. They put all the security guys behind a glass wall with CSI style lighting and giant TV's with "realtime attack maps", "global security health checks" and other useless crap that's displayed n sexy graphs and EGC style graphics.

      It's all a show.

    9. Re:fix it first by Anonymous Coward · · Score: 0

      1) see Netflow/ICMP/SNMP
      2) see Netflow/ICMP/SNMP
      3) see Netflow/ICMP/SNMP
      4) Maybe... see Netflow/ICMP/SNMP
      5) issue disconnect and blacklist commands dependant on your router and hardware vendors?

      I look at the interface and don't see anything that can't/isn't already done by other OSS and commercial packages. As for history, If other netflow/snmp packages are any indication you could just about rewind, fast forward, pause, play... Hell they even call their product "DVR"

  3. Been done by Anonymous Coward · · Score: 0

    There was a DOOM skin for systems administration 15 years ago.

              mark "that java process! Where's my BFG 9000?!"

    1. Re:Been done by Anonymous Coward · · Score: 0
  4. Big Deal by Anonymous Coward · · Score: 0

    Anyone who cares this much about a dashboard can build one pretty easily these days.

  5. Video of the Dashboard by bobstreo · · Score: 1, Redundant

    An mp4 of the dashboard visualizer is on the page at

    https://www.protectwise.com/pl...

    instead of a tiny jpg.

    Looks nice for a dash.

    1. Re:Video of the Dashboard by Anonymous Coward · · Score: 1

      I followed the link, it wants me to sign up for a demo? No thanks lol I'd rather see this mp4 because the jpeg indeed makes it look like a garbled mess.

    2. Re:Video of the Dashboard by Anonymous Coward · · Score: 0

      Just keep scrolling down. Eventually you'll get the "Visualize everything" section.

    3. Re:Video of the Dashboard by Anonymous Coward · · Score: 0

      Scroll down

  6. Something to be cautious about by lazlo · · Score: 1

    While I like the idea of thinking about UI improvements, and I certainly don't mind having new ideas in the realm, the thing that you most need to consider when bringing UI ideas from the game world is that gaming is designed to be challenging, while the purpose of a good functional UI is to remove challenges. Bringing UI ideas in from hollywood is slightly easier, because their intent is to be visually interesting, which is a bonus for a functional UI if, and only if, you can make it visually interesting without compromising functionality (or preferably in a way that enhances functionality)

    --
    Pound! Bang! Bin! Bash! is this a shell script or a Batman comic?
    1. Re:Something to be cautious about by gstoddart · · Score: 0

      Except the UIs in games are designed to convey as much information as possible as readily as possible.

      Game designers don't make the displays for the stuff you need to know difficult ... they make them useful.

      Conveying more information quickly is something we don't see enough of. Especially with the trend of putting everything in a web page.

      As a high-level "show me everything I need to know in one screen", I'd say this has done a really good job of that.

      --
      Lost at C:>. Found at C.
  7. I'll create a GUI interface using Visual Basic... by grnbrg · · Score: 1

    To see if I can track an IP address!

  8. At first i was like by Anonymous Coward · · Score: 0

    "No fucking way I'm using something so silly."

    Then i looked at the screenshots.... ok im ready to download now.

  9. Rock Bottom by VorpalRodent · · Score: 1

    Have we reached a new low where now Slashdot articles are supported by a link to Pinterest?

    --
    Take it to the limit, everybody to the limit, come on, everybody fhqwhgads.
  10. Anyone remember DOOM as the sysadmin tool? by cant_get_a_good_nick · · Score: 1

    The rail gun was much more fun than typing out kill -TERM.

  11. Mixing two very different things... by Chris+Mattern · · Score: 1

    Video game UIs are often very good, if flashy. They have to be--they're actually used, and used by people who want good performance.

    Simulated UIs in movies and TV, on the other hand, just have to look good, and feed whatever plot information is relevant to the audience. This means things are done that really wouldn't work in a real UI. That's why attempts to turn Star Trek's "LCARS" interface into a real UI have fallen on their faces.

    1. Re:Mixing two very different things... by westlake · · Score: 2

      Simulated UIs in movies and TV, on the other hand, just have to look good, and feed whatever plot information is relevant to the audience. This means things are done that really wouldn't work in a real UI.

      But isn't feeding relevant information to the user in an easily readable form the core function of any UI?

    2. Re:Mixing two very different things... by Chris+Mattern · · Score: 1

      Two problems with that: a) the user of the UI is not the viewer of the movie. They have different needs--what information is relevant is largely different. and b) "feeding relevant information" is only half the core functionality of a UI. The other half is providing effective control, which is completely irrelevant in a movie's simulated UI.

    3. Re:Mixing two very different things... by Anonymous Coward · · Score: 0

      Two problems with that: a) the user of the UI is not the viewer of the movie. They have different needs--what information is relevant is largely different. and b) "feeding relevant information" is only half the core functionality of a UI. The other half is providing effective control, which is completely irrelevant in a movie's simulated UI.

      sfdfsdf

  12. Losing pinterest by Anonymous Coward · · Score: 0

    I tried to follow the second link and it gave the usual "OH NOES! YOU DON'T HAVE JAVASCRIPT!!!!1" complaint, so I turned on Javascript and it made some stupid window-shade thing that covers up the page as you scroll down. Why does Firefox allow this crap? The page content is clearly rendering behind the shade, so why not just let me view it?

    Anyway, the following line in userContent.css fixes that scrolling window shade garbage, in case you really want to see a few examples of UI design even worse than Windows 8:

    div[class="appContent hasKLPBar"] { visibility: hidden !important; }

    1. Re:Losing pinterest by U2xhc2hkb3QgU3Vja3M · · Score: 1

      I found an even simpler solution: fuck you, Pinterest. If I can't watch your content without a fucking account then I'm not going to use your stupid website.

  13. Security pros? by Anonymous Coward · · Score: 0

    If your security professionals need a game-like UI, you have a serious problem. Maybe we shouldn't hire children for important roles.

  14. Bikeshed painting by Hognoxious · · Score: 2

    There's a bit more to usability than looking good.

    Win 8 & Gnome 3 look good.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  15. IOW by Hognoxious · · Score: 1

    If his name sounds familiar [it doesn't - Ed], it's because he was the Lead Animated Graphics Artist for the movie TRON: Legacy.

    So he knows about as much about designing real UIs for real systems that real people use to do real tasks as C.S. Lewis did about travelling through a real magic wardrobe and helping a real talking lion to overthrow a real witch who can really turn creatures to stone.

    I could go on.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  16. Touch is retarded UI design 4 long periods of use by UnknownSoldier · · Score: 1

    There are 2 problems:

    1. A lot of "futuristic" UI relies on touch. This is retarded. Arms get tired.
    I guess that isn't as flashy as a machine that can read your brainwaves.

    2. All these display devices take up tons of physical room. Again this is dumb. A HD version of Google glass, or an implant on the cornea, would provide tons of virtual space and not take up bulky "monitors". I guess "wall sized" monitors is sexy though.

  17. It Is Very Pretty by Anonymous Coward · · Score: 0

    It is very pretty. It's really visually appealing. Which is great when you want to relax and passively watch a movie. I personally don;t like it for video games, but the masses don;t seem to agree with me there.

    None the less, it is absolutely awful for clearly expressing information, especially such complex information. I hope that the underlying product is better than this GUI. I hope that it isn't just lipstick on a pig.

    Speaking of pigs, Snort could use a good GUI. No, the one you are about to recommend sucks ass.

  18. Yes, but GUIs have their place too by Chris+Newton · · Score: 2

    True security is done in logs.

    I get what you're saying, and you certainly have a valid point about flashy GUIs not necessarily being effective GUIs.

    However, speaking as someone who does a lot of UI work, there is also the other side of the coin, which is that CLIs and plain text log files are often neither the most efficient nor the most accurate way to configure or discover the things you care about.

    In their favour, plain text formats are amenable to scripting and analysis using general text manipulation tools, and of course they have longevity. But they are also unstructured, they offer little interactive, real-time support, and ultimately they are limited to what you can express in sequences of characters (which is just about anything, but only if you're willing to write enough).

    Even in highly technical environments, a good visualisation can present information in a form that is prioritised and draws attention to the most important features or anomalous results, or that gives a realistic overview of the current situation far quicker than scanning text output would. If you start to make those visual representations interactive, you can potentially also make complicated configuration work or progressive explorations of the data quicker and less error-prone.

  19. Re:Touch is retarded UI design 4 long periods of u by Bob+the+Super+Hamste · · Score: 1

    Well sometimes a giant wall of glass is useful for everyone to look at to be able to get on the same page while having their own local screens to view specifics they care about as they coordinate efforts when shit goes wrong.

    --
    Time to offend someone
  20. Oblig JP by wonkey_monkey · · Score: 1

    It's a Unix system. I know this!

    --
    systemd is Roko's Basilisk.
  21. Hollywood UI? Do security in POST by Anonymous Coward · · Score: 0

    Problem is security UIs need to be accesible anywhere and quickly. That menas lightweight and simple.

    Game UIs and stuff coming out of Hollywood run on top of the line graphic cards, or they edited into a movie in POST. No security guy's going to lug around a Alienware desktop to log in and change a few config files for a 2 min task.

  22. GUI should be distinct from OS by Karmashock · · Score: 1

    ... and many programs for that matter.

    MS gets into trouble every time they release a new OS and its mostly gripes about GUI issues. Why not solve that by having them be two separate products?

    There are already some third party GUIs. They generally fall back on MS interfaces when things get down and dirty but the general file navigation and application execution and desktop experience is already something you can replace in some cases.

    MS should have a framework/api for replacing the interface with... whatever.

    This is also a big security and ease of use thing.

    In corporate environments, a lot of what you're trying to do is give users the ability to access X but not Y. And changing the way the interface works... up and including just outright removing things without a password would actually be pretty cool.

    In consumer environments... you know that family member that only does 5 things on their computer and never anything else... and is constantly confused by everything? What if you just removed the ability to do anything but those five things on the machine and made whatever settings they actually might like to play with really prominent... volume... mouse sensitivity... stuff they might like to actually mess with.

    I've played around with a few programs to make custom GUIs... I really like Kiosk software for that. It restricts users to what they should be doing not what they shouldn't be doing. And it helps people that are clueless use a system that they'd otherwise struggle with.

    I still remember the old litestep days. I especially love the program menus from that GUI. They were LIGHTNING. Because rather than query a folder for short cuts, it just had a text file it kept in memory. The program list was a literal list in a literal text file. So when you clicked on the programs button INSTANTLY open.

    Anyway, I think MS's new OS's would be less annoying if they weren't bundled with a mandatory GUI change. Then we could just focus on new features, improved performance, whatever... and people could use whatever GUI made them stiff in the coolness of the night.

    --
    I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
  23. I Agree But... by Anonymous Coward · · Score: 0

    I agree with what you're saying. I think the interface they have designed is visually appealing, but it does a poor job of conveying the necessary information. This makes it unfit for the task.

    However, this guy did successfully use an LCARS interface on his home automation system.

  24. I know this! This is unix! by Hognoxious · · Score: 1

    The job of an artist designing ANYTHING for a movie/TV Show/video game is to make sure the audience understands what they're seeing in a very short amount of time.

    Yes - the ONE thing that's relevant to the, umm, plot. A real UI generally needs to show several concurrently from a possible set of dozens or even hundreds.

    And (this should be blindingly obvious but apparently it isn't) a movie UI is unidirectional, because [spoiler] it's just fucking pretend.

    So yeah, apart from that they're totally the same. After the news, some random webtard explains why real-life detectives should say "zoom - enhance" more.

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  25. Re:I know this! This is unix! by MobileTatsu-NJG · · Score: 1

    A real UI generally needs to show several concurrently from a possible set of dozens or even hundreds.

    It should show you the current relevant ones, just like a plot-driven UI. What you're describing just becomes noise on the screen.

    --

    "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)