You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
A comprehensive, **GSOC-level security monitoring solution** that leverages Artificial Intelligence to detect network anomalies, visualize threats in real-time, and provide actionable insights for system administrators.
@@ -21,36 +21,36 @@ flowchart LR
21
21
Ingest --> DB[(SQLite via SQLAlchemy)]
22
22
Ingest --> Model[Isolation Forest Anomaly Model]
23
23
Model --> Scored[Scored Events - Normal / Suspicious / Critical]
24
-
Scored --> API[REST API]
25
-
API --> Dashboard[Next.js Dashboard]
26
-
Dashboard --> Visuals[3D Globe & Network Graph]
24
+
Scored --> Dashboard[Next.js Real-time Dashboard]
25
+
Dashboard --> Globe[3D Threat Globe]
26
+
Dashboard --> Graph[3D Network Topology]
27
+
Dashboard --> Charts[Recharts Visualizations]
27
28
```
28
29
29
30
The platform ingests raw system and network logs, stores them in a relational database, scores them with an Isolation Forest model, and serves the results to a Next.js dashboard that renders traditional charts and immersive 3D visualizations.
30
31
31
32
## 🚀 Key Features
32
33
33
-
***🕵️ Real-time Anomaly Detection**: Utilizes Unsupervised Learning (Isolation Forest) to detect outliers in network traffic and user behavior.
34
-
***📊 Interactive Dashboard**: Built with **Next.js** and **Recharts** to visualize traffic spikes, threat distribution, and live logs.
35
-
***🌐 3D Threat Globe Visualization**: Interactive 3D globe using React Three Fiber to visualize global threat distribution with color-coded severity indicators.
36
-
***🔗 3D Network Topology Graph**: Real-time 3D network relationship mapping with interactive nodes showing server, client, and threat connections.
37
-
***✨ Advanced 3D Animations**: Smooth animations, hover effects, and auto-rotation for immersive threat monitoring experience.
38
-
***⚡ High-Performance Backend**: **FastAPI** drives the API, ensuring millisecond-latency responses for log ingestion and inference.
39
-
***📥 Universal Log Ingestion**: capable of parsing standardized system logs and network traffic data.
40
-
***🚨 Threat Intelligence**: Automatically classifies events as "Normal", "Suspicious", or "Critical" based on AI confidence scores.
41
-
42
-
---
34
+
- 🕵️ **Real-time Anomaly Detection**: Utilizes Unsupervised Learning (Isolation Forest) to detect outliers in network traffic and user behavior.
35
+
- 📊 **Interactive Dashboard**: Built with **Next.js** and **Recharts** to visualize traffic spikes, threat distribution, and live logs.
36
+
- 🌐 **3D Threat Globe Visualization**: Interactive 3D globe using React Three Fiber to visualize global threat distribution with color-coded severity indicators.
37
+
- 🔗 **3D Network Topology Graph**: Real-time 3D network relationship mapping with interactive nodes showing server, client, and threat connections.
38
+
- ✨ **Advanced 3D Animations**: Smooth animations, hover effects, and auto-rotation for immersive threat monitoring experience.
39
+
- ⚡ **High-Performance Backend**: **FastAPI** drives the API, ensuring millisecond-latency responses for log ingestion and inference.
40
+
- 📥 **Universal Log Ingestion**: Capable of parsing standardized system logs and network traffic data.
41
+
- 🚨 **Threat Intelligence**: Automatically classifies events as "Normal", "Suspicious", or "Critical" based on AI confidence scores.
43
42
44
43
## 🛠️ Tech Stack
45
44
46
45
### Backend & AI
47
-
***Python 3.10+**: Core logic.
48
-
***FastAPI**: High-performance Async API framework.
-**Pandas & NumPy**: Data manipulation and feature extraction.
51
+
-**SQLAlchemy & SQLite**: ORM and Database (Easily scalable to PostgreSQL).
52
+
53
+
### 🤖 Why Isolation Forest?
54
54
55
55
This project focuses on unsupervised anomaly detection, where labeled attack data is rare and patterns evolve quickly. Isolation Forest is well-suited because:
56
56
@@ -62,32 +62,44 @@ This project focuses on unsupervised anomaly detection, where labeled attack dat
62
62
These properties make Isolation Forest a practical baseline model for an AI-powered security monitoring platform, while leaving room for future extensions (autoencoders, ensembles, or hybrid rules-plus-ML systems).
63
63
64
64
### Frontend
65
-
***Next.js 14**: React framework for production.
66
-
***TailwindCSS**: Utility-first styling.
67
-
***Recharts**: Composable charting library.
68
-
***Lucide React**: Beautiful icons.
69
-
***Three.js**: WebGL 3D graphics library for immersive visualizations.
70
-
***React Three Fiber**: React renderer for Three.js enabling declarative 3D scenes.
71
-
***@react-three/drei**: Useful helpers and abstractions for React Three Fiber.
72
65
73
-
---
66
+
-**Next.js 15**: React framework for production.
67
+
-**TailwindCSS**: Utility-first styling.
68
+
-**Recharts**: Composable charting library.
69
+
-**Lucide React**: Beautiful icons.
70
+
-**Three.js**: WebGL 3D graphics library for immersive visualizations.
71
+
-**React Three Fiber**: React renderer for Three.js enabling declarative 3D scenes.
72
+
-**@react-three/drei**: Useful helpers and abstractions for React Three Fiber.
0 commit comments