Capstone
Cybersecurity
Network Intrusion Detection System
Machine-learning anomaly detection over live network traffic
- Python
- Scapy
- XGBoost
- Kafka
- +2
₹5,499₹9,499
4.9/97 reviews
Cybersecurity · Capstone
Ransomware Early Detection from File Activity
Watches file events for entropy spikes and halts the process in a sandbox
5-6 weeks build
Overview
A behavioural monitor that watches file-system events on a sandboxed VM and looks for the signature of ransomware in progress: bursts of rapid rewrites, mass renames and a sharp rise in file entropy as content is encrypted. When the pattern crosses a threshold it suspends the offending process, and the whole experiment runs on a disposable VM with benign simulators, never live ransomware.
What makes it stand up
- 01Runs only on a disposable sandbox VM with benign simulators
- 02Real-time file-event stream via a Watchdog observer
- 03Entropy and rename-rate features that flag bulk encryption
- 04Classifier plus thresholds to cut false alarms on backups
- 05Automated process suspension when the pattern is confirmed
Module breakdown
- 01
Monitor
Captures create, modify and rename events with metadata.
- 02
Features
Computes entropy, write bursts and rename rates in windows.
- 03
Detector
Scores activity and confirms with a debounce threshold.
- 04
Response
Suspends the culprit process and snapshots the evidence.
- 05
Test harness
Benign simulators that mimic encryption behaviour safely.
After this, you will be able to
- Explain the file-activity signature that distinguishes ransomware
- Defend the entropy features and the sandbox-only design
- Demo detection and process suspension on a benign simulator
Technology stack
- Python
- Watchdog
- scikit-learn
- Pandas
- FastAPI
- Level
- Capstone
- Domain
- Cybersecurity
- Build time
- 5-6 weeks
- Difficulty
You receive
- Complete, commented source code
- 60-90 page project report (IEEE format)
- Editable presentation deck
- Architecture, ER and UML diagrams
- Local setup and deployment guide
- Sample dataset or seed data
- Viva question bank with answers
- One 45-minute walkthrough call
- 30 days of doubt-clearing support