CTMS - Cyber Threat Management System
<p>This project introduces a lightweight, desktop-based Human Intrusion Detection System (HIDS) tailored for individual system users. The solution delivers real-time security monitoring by analyzing Windows security logs, detecting anomalies such as brute force attempts and credential stuffing attacks, and issuing automated alerts across multiple communication channels. Designed as a personal alternative to complex Security Information and Event Management (SIEM) systems, the system integrates log analysis, anomaly detection, and incident response into a streamlined framework. Key technical components include: • PowerShell scripts for real-time Windows Event Log extraction • SQL Server for structured log storage and advanced query analysis • Threshold-based detection (≥5 failed login attempts within 10 minutes) • Automated Email and SMS notifications via Database Mail and Twilio API • PyQt dashboard offering real-time threat visualization and dynamic risk scoring Together, these features provide individual users with accessible, enterprise-grade security monitoring capabilities without the complexity and resource demands of traditional solutions.</p>
Publication Details
- Journal
- Zenodo (CERN European Organization for Nuclear Research)
- Published
- 2025-01-01
- DOI
- https://doi.org/10.13140/rg.2.2.20871.10403
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.00