Capstone
Cybersecurity
Network Intrusion Detection System
Machine-learning anomaly detection over live network traffic
- Python
- Scapy
- XGBoost
- Kafka
- +2
₹5,499₹9,499
4.9/97 reviews
Cybersecurity · Capstone
Mini SIEM: Log Collection & Anomaly Alerts
Ingests syslog and auth logs, correlates events and alerts on anomalies
5-6 weeks build
Overview
A scaled-down security information and event management system: agents ship syslog and Linux auth logs into a searchable store, correlation rules fire on patterns like repeated failed logins, and an unsupervised model flags volume and timing anomalies the rules miss. Analysts triage everything from a dashboard of ranked, deduplicated alerts.
What makes it stand up
- 01Collects and normalises syslog and auth logs from multiple hosts
- 02Correlation rules for brute force, privilege changes and odd hours
- 03Unsupervised anomaly detection over event-rate baselines
- 04Alert dashboard with severity, dedupe and acknowledgement
- 05Runs on lab VMs with sample log generators included
Module breakdown
- 01
Collection
Ships and parses logs into a normalised event schema.
- 02
Storage
Indexes events for fast time-range and field search.
- 03
Correlation
Rule engine matching multi-step suspicious sequences.
- 04
Anomalies
Baselines event rates and flags statistical outliers.
- 05
Console
Ranks, deduplicates and tracks the state of each alert.
After this, you will be able to
- Explain how rules and anomaly detection complement each other
- Defend your event schema and correlation-rule design
- Demo an attack scenario raising and resolving alerts
Technology stack
- Python
- FastAPI
- Elasticsearch
- scikit-learn
- React
- Level
- Capstone
- Domain
- Cybersecurity
- Build time
- 5-6 weeks
- Difficulty
You receive
- Complete, commented source code
- 60-90 page project report (IEEE format)
- Editable presentation deck
- Architecture, ER and UML diagrams
- Local setup and deployment guide
- Sample dataset or seed data
- Viva question bank with answers
- One 45-minute walkthrough call
- 30 days of doubt-clearing support