A compact, self-contained lab that demonstrates real-time intrusion detection and automated response using an IDS script (Scapy), Cisco router ACLs (Netmiko), and victim host hardening (Paramiko + iptables).
A modular Python-based SIEM/IPS that monitors system logs in real-time (Sentinel) and automates threat response (SOAR). It features Regex-based log normalization, hybrid event correlation (SSH/Web), and automated firewall blocking integrated with AbuseIPDB and Discord alerts.
Security-focused distributed NAS platform built using Nextcloud, Docker, Grafana, Prometheus, and fail2ban with real-time monitoring, security event logging, brute-force detection, infrastructure observability, and centralized dashboard monitoring.
Segmented enterprise network lab with pfSense, Suricata IDS/IPS, and attack simulation
PiNetCore - Production-ready Raspberry Pi 5 network appliance. Rust-based packet capture engine with modular plugin architecture, nftables firewall, and TypeScript/React dashboard. Features inline bridge mode, VPN integration (WireGuard/OpenVPN), IDS/IPS support, and centralized logging. Built for home labs and advanced network control.
A cloud-native security lab on AWS that automates threat detection and compliance enforcement. Deploys a 3-tier VPC with Suricata IDS/IPS, ModSecurity WAF, Duo MFA, WireGuard VPN, and ELK Stack — all provisioned via Terraform, configured with Ansible, and continuously validated with InSpec compliance-as-code checks.
Autonomous IDS/IPS with ensemble ML voting, post-quantum cryptography, Kubernetes Zero Trust, self-healing watchdog, and live SOC dashboard
A real-time, log-based Intrusion Detection (IDS) & Prevention System (IPS) featuring a custom Python regex engine, stateful sliding-window attack detection, automated firewall rule generation (iptables/Windows Defender), and an obsidian-themed React SOC Analyst Dashboard.
Free, interactive course on firewalls & network security, built around OPNsense — 5 modules, 13 lessons, 51 quizzes. Runs entirely in your browser.
SentinAI: A localized SOC toolkit and Hybrid IDS/IPS utilizing a dual-engine architecture (Heuristics + ML/IsolationForest) for real-time network threat detection.
Documentation of a ransomware security incident at a healthcare clinic using the 5 W's framework for incident handling and reporting.
Fully segmented home network with OPNsense, Suricata IDS/IPS, VLAN isolation, WireGuard VPN and TIG monitoring stack. Defense-in-depth architecture with 7 isolated zones.
Project on Grocery Chain Network using Cisco Packet Tracer
Automated network incident detection and response system. Suricata IDS/IPS, automated IP blocking, forensic analysis dashboard. Graded 10/10.
Complete network security checklist for audits and assessments. Covers firewall rules, network segmentation, access control, wireless security, VPN, and monitoring with CIS Controls mapping.
Projecte intermodular ASIX: Docker, Kubernetes, Helm, Istio, Ansible i Suricata IDS/IPS. Del contenidor local a la producció cloud-native amb ciberseguretat activa.
Real-time Network Traffic Analysis Engine capable of processing high-velocity data streams to detect statistical anomalies using Z-Score & Context-Aware filtering.
Snort IDS/IPS rule generator — Flask web app with inline help tooltips, 12 detection templates, PCRE flag checkboxes, HTTP URI/Header matching, rule validation, and .rules file import/export
Add a description, image, and links to the ids-ips topic page so that developers can more easily learn about it.
To associate your repository with the ids-ips topic, visit your repo's landing page and select "manage topics."