MalwareVis: entity-based visualization of malware network traces
PortVis: a tool for port-based detection of security events