Abstract: An interface for customizing dashboards based on parallel edges includes functionality for detecting an edge dragging event of a selected edge in a dashboard, the edge dragging event including dragging the selected edge along an axis perpendicular to the edge, and identifying a parallel edge to the selected edge, the parallel edge within a threshold distance to the selected edge along the axis. The interface further includes functionality for setting the edge dragging event to make the selected edge be collinear with the parallel edge based on the parallel edge being within the threshold distance to the selected edge, and stopping the edge dragging event at a stop location to generate an updated dashboard. The interface further includes functionality for presenting the updated dashboard.

Abstract: In general, in one aspect, a computer implemented method includes detecting a drop zone location of a selected visualization within a dashboard. At least one neighboring visualization to the drop zone location is identified, wherein the at least one neighboring visualization shares an edge with the drop zone location. The selected visualization is sized for the drop zone location. The at least one neighboring visualization is resized based on the selected visualization being added to the drop zone location. The selected visualization is then added to the drop zone location to generate an updated dashboard. The updated dashboard is presented.

Abstract: A system performs hierarchical navigation through network flow data. A user interface is configured to display network flow data and allow hierarchical navigation across the network flow data. The user interface comprises a plurality of axes and lines connecting data points between axes. Data points along an axis represent values of an attribute aggregated along a set of dimensions. The system receives requests for expanding data points along a particular dimension or collapsing the data points along the particular dimension. The system reconfigures the user interface according to the received request and sends the reconfigured user interface for display via the client device. The user interface provides better visibility into the network flow data, thereby allowing security analysts to spot communication patterns associated with security issues and navigate through various dimensions to further analyze a suspect communication pattern.