Network packet sniffer and analyzer with ML classification, real-time GUI, and intrusion detection capabilities
-
Updated
Jul 13, 2025 - Python
#
intrustion-detection
Here are 11 public repositories matching this topic...
Machine learning-enhanced DNS tunneling detection system achieving 100% accuracy across multiple tunneling tools
python dns machine-learning scikit-learn cybersecurity network-analysis network-security data-exfiltration dns-tunneling anomaly-detection security-research packet-analysis threat-detection pcap-analysis intrustion-detection
-
Updated
Feb 6, 2026 - Python
Self-hosted honeypot and threat-intelligence platform. Native sensors score attackers across your WAN IPs, so an IP that hits more of them weighs more. Only on operator approval are confirmed-real sources reported to abuse vendors and published as a firewall blocklist. Rust, PostgreSQL, event-sourced. Single node or cluster.
rust honeypot firewall blocklist postgresql self-hosted cybersecurity threat-hunting malware-analysis iot-security network-security threat-intelligence telnet-honeypot ip-reputation ssh-honeypot htmx deception-technology intrustion-detection
-
Updated
Oct 12, 2026 - Rust
Passive IDS/SIEM-lite lab (Suricata) on real Cisco/Fortinet/Proxmox hardware — Suricata detecting live EICAR transfers and port scans
-
Updated
Sep 11, 2026 - HTML
UNSW-NB15 network traffic classification using a CART decision tree built from scratch. NumPy, no scikit-learn. Coursework companion to my SOC lab.
python machine-learning data-mining numpy jupyter-notebook cybersecurity classification network-security unsw-nb15 cart-decision-tree intrustion-detection
-
Updated
Jul 16, 2026 - Jupyter Notebook
An original firewall built on real math — provably consistent rules and a tunable, proven bound on false positives.
python machine-learning numpy firewall information-theory cybersecurity formal-methods bayesian-inference ddos-detection network-security anomaly-detection sequential-analysis packet-analysis conformal-prediction drift-detection intrustion-detection
-
Updated
Oct 5, 2026 - Python
AI-Powered Network Intrusion Detection System (NIDS) - An unsupervised ML approach to detecting DDoS attacks, port scans, and network anomalies using Isolation Forest.
python machine-learning scikit-learn network-security anomaly-detection ai-security streamlit intrustion-detection
-
Updated
Sep 25, 2025 - Python
Real-time network intrusion detection system built in Python using Scapy. Detects port scanning, traffic spikes, and ICMP floods.
-
Updated
Jul 28, 2026 - Python
A lightweight, high-performance host-based intrusion detection agent (HIDS) built in Go with real-time monitoring and HMAC-secured baselining.
golang cybersecurity inotify hids security-tools devsecops blue-team file-integrity-monitoring intrustion-detection
-
Updated
Mar 1, 2026 - Go
Clean-room Python reimplementation of PARD-SSM (arXiv 2604.02299): attacks as regimes, not anomalies. Regime-switching state-space intrusion detection with KL-gated kill-chain alerts, a reproduction harness, and pre-registered acceptance bands. The paper's code link is a 404.
machine-learning cybersecurity unsw-nb15 state-space-models detection-engineering cicids2017 kill-chain intrustion-detection switching-state-space-model
-
Updated
May 26, 2026 - Python
Packet analyzer in C (libpcap) that decodes Ethernet, IPv4, TCP, UDP and ICMP by hand, verified field-by-field against Wireshark. Growing into a lightweight network intrusion detector.
-
Updated
Oct 1, 2026 - C
Add this topic to your repo
To associate your repository with the intrustion-detection topic, visit your repo's landing page and select "manage topics."