A global cybersecurity firm from Russia, offering robust protection against digital threats.

Project Type

Kaspersky Lab is a global cybersecurity company. I designed the interface of a B2B product for monitoring threats in industrial networks, aimed at engineers and SOC analysts.
The main goal was to provide operators with a clear tool for visual analysis of equipment status and timely incident response.

Role

Product designer

I DESIGNED AN ALTERNATIVE ANALYTICAL LAYER — AN INTERACTIVE MONITORING MAP
WITH HIERARCHICAL DATA VISUALIZATION
IT DOESN’T REPLACE TRADITIONAL TABLES BUT ADDS SPATIAL AND CONTEXTUAL INSIGHT, ALLOWING ANALYSTS TO SEE INCIDENT CORRELATIONS AND PRIORITIES ACROSS DIFFERENT ACCESS LEVELS

THREE LEVELS OF DETAIL:
GLOBAL LEVEL — A MAP OF INDUSTRIAL REGIONS SHOWING OVERALL SECURITY STATUS
FACILITY LEVEL — MONITORING OF PRODUCTION NODES, NETWORKS, AND SENSORS WITH INCIDENTS CLASSIFIED BY SEVERITY
COMPONENT LEVEL — DETAILED VIEW
OF DEVICE PARAMETERS, EVENT LOGS,
AND LOCAL ANOMALIES

Cyber-threat monitoring in industrial networks was primarily done through tables
While effective for analytics, this format made it difficult to see relationships between incidents and their impact on infrastructure
Critical events could easily get lost in long data lists, forcing engineers
to spend significant time mapping them
to specific sites or equipment
The system lacked a visual layer that helped analysts quickly understand where an incident occurred
and how severe it was

Solution

Problem

Incident analysis time reduced by ~25% through hierarchical visualization and contextual navigation

Accuracy of identifying critical events increased by ~18% after introducing visual severity patterns and priority filters

‍

UX errors among operators
decreased by ~30% due to unified visualization and improved data readability

Average response time decreased by 20% with direct contextual links between analysis layers

The visual layer improved collaboration between engineers and analysts,
reducing coordination time by ~40%

NODE STATUS / SECTOR 7C — TEMP 68.4 °C
PIPELINE #12A — PRESSURE Δ +9 %
NETWORK TIMEOUT / RETRY EXCEEDED
ALERT 302 — GAS SENSOR OUT OF RANGE
VIBRATION LEVEL –57 dB / STABLE
SUPPRESSION LOOP — STATUS NORMAL
CORE VOLTAGE DROP 218V / 3.6 s
ANOMALY SCAN — 4 EVENTS FOUND
OPERATOR A-417 / TOKEN VERIFIED
CLUSTER MAP UPDATE / RISK 0.74
HEAT FLUX +12 % / WARNING
ACCESS LOG — LEVEL 2 UNKNOWN
ISOLATION GATE v3.2 ACTIVE
LATENCY 187 ms / SYNC RESTORED
NODE 09 — FLOW –3.1 %
CHECKSUM OK / 02:37:18
VALVE CONTROL — MODE NORMAL

Results