CTMS - Cyber Threat Management System

<p>This project introduces a lightweight, desktop-based Human Intrusion Detection System (HIDS) tailored for individual system users. The solution delivers real-time security monitoring by analyzing Windows security logs, detecting anomalies such as brute force attempts and credential stuffing attacks, and issuing automated alerts across multiple communication channels. Designed as a personal alternative to complex Security Information and Event Management (SIEM) systems, the system integrates log analysis, anomaly detection, and incident response into a streamlined framework. Key technical components include: • PowerShell scripts for real-time Windows Event Log extraction • SQL Server for structured log storage and advanced query analysis • Threshold-based detection (≥5 failed login attempts within 10 minutes) • Automated Email and SMS notifications via Database Mail and Twilio API • PyQt dashboard offering real-time threat visualization and dynamic risk scoring Together, these features provide individual users with accessible, enterprise-grade security monitoring capabilities without the complexity and resource demands of traditional solutions.</p>

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-01-01
DOI
https://doi.org/10.13140/rg.2.2.20871.10403
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

CTMS - Cyber Threat Management System

Zenodo (CERN European Organization for Nuclear Research)
Network Security and Intrusion Detection
article

CTMS - Cyber Threat Management System

article en

Abstract

<p>This project introduces a lightweight, desktop-based Human Intrusion Detection System (HIDS) tailored for individual system users. The solution delivers real-time security monitoring by analyzing Windows security logs, detecting anomalies such as brute force attempts and credential stuffing attacks, and issuing automated alerts across multiple communication channels. Designed as a personal alternative to complex Security Information and Event Management (SIEM) systems, the system integrates log analysis, anomaly detection, and incident response into a streamlined framework. Key technical components include: • PowerShell scripts for real-time Windows Event Log extraction • SQL Server for structured log storage and advanced query analysis • Threshold-based detection (≥5 failed login attempts within 10 minutes) • Automated Email and SMS notifications via Database Mail and Twilio API • PyQt dashboard offering real-time threat visualization and dynamic risk scoring Together, these features provide individual users with accessible, enterprise-grade security monitoring capabilities without the complexity and resource demands of traditional solutions.</p>

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 53%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

CTMS - Cyber Threat Management System · Zenodo (CERN European Organization for Nuclear Research) (2025) | TGRS Research Map | TGRS