Visualization of monitored data

OneSpan Threat View uses data on threat event types received from your App Shielding integration and visualizes this data in different charts collected in widgets.

Threat View displays these widgets on the dashboard and in threat event reports.

• Dashboard

  The dashboard on the home page of the Threat View Administration Interface is a dynamic view on the collected data. It displays the widgets to provide an operational overview of recent data to facilitate taking decisions based on the threat landscape. For more information, see Dashboard.

• Threat event reports

  For authorized users, the dashboard also displays the Threat Events Reports list. These reports, like the dashboard, also visualize the collected data in widgets but the report data can be filtered to focus on a specific time period. This enables a more in-depth analysis of the specified threat. Reports can only be accessed by authorized users with the corresponding permissions, typically Insights Viewer user accounts. For more information, see Threat event reports.

Charts and widgets

When collecting the data, Threat View uses different parameters to check against a given threat event type and creates different types of widgets and charts to visualize the data. The following table provides an overview of the widget and chart types and the data analysis parameters used to create these.

1: This distinction is only used in the Threat Event Reports.

Analysis parameters

The analysis parameters Threat View uses to check against a given threat event type to create the charts are:

• Session vs. Event

  • Sessions are the time span between starting the mobile app and shutting it down.

  • Events are the actual individual threat events.

• Location

• Operating system

• Device model

• Time period

• Threat event type

Chart types

The chart types with the aggregated data Threat View collects from Mobile Application Shielding to facilitate data consumption and analysis are:

• World map

• Lists

• Big number charts

• Line chart

• Donut chart

• Stacked area charts

• Vertical bar chart

Widget types

On the dashboard, Threat View displays the following widget types:

• Events worldwide: world map

  Correlated data aggregation: the total number of reported events during the last 7 days per country.

• Latest Events: list

  List of all events based on a set of monitored data chosen for the list over a given period of time.

• Threat Events Reports: list

  List with available threat event reports, analyzing the total number of threat events during the previous day.

In the individual threat reports, Threat View displays the following widget types:

• Total Events, Operating system Events

  Big number charts with the total number of events and total number of events by operating system.

• Threat event type Trend

  Line chart for threat event type by operating system. This widget shows the percentage of total sessions where a given threat event type occurred per operating system for the selected time period per hour.

• OS Usage

  Correlation of parameters. Donut chart with the distribution in percentage of a given threat event type per operating system sessions for the selected time period.

• Operating system threat event type Trend

  Correlation of parameters. Stacked area charts with a comparison of the specific threat event type and the total number of events per operating system for the selected time period.

• Top 10 Device Models

  Vertical Bar Chart with the threat event type, displaying events that occurred over the selected time period for the 10 device models with the most events of different threat event types.

For more information on the widget types and the data they provide, see Dashboard and Threat event reports.