🛡️ CyberShield-AI

AI-Powered Cyber Threat Intelligence Platform for real-time cyber attack detection and Security Operations Center (SOC) monitoring.

---

📖 Overview

CyberShield-AI is an enterprise-level Security Operations Center (SOC) platform that combines Artificial Intelligence, Machine Learning, and Cybersecurity to monitor, detect, classify, and manage cyber threats in real time.

The platform analyzes incoming security events, applies machine learning models to identify suspicious activities, and provides analysts with an interactive dashboard for investigation and response.

---

✨ Features

• 🔍 Real-time Threat Detection
• 🤖 AI & Machine Learning-based Threat Classification
• 📊 Interactive SOC Dashboard
• 🚨 Alert Management System
• 📂 Threat Investigation Workflow
• 📡 Threat Intelligence Aggregation
• 🔐 Authentication & Authorization
• 📈 Live Monitoring & Analytics
• 📦 Docker-based Deployment
• 🌐 REST API & WebSocket Support

---

🏗️ System Architecture

Frontend (Next.js)
        │
 REST / WebSocket
        │
Backend (NestJS)
        │
 ML Inference API
        │
ML Service (FastAPI)
        │
 MongoDB Database

---

🛠️ Tech Stack

Frontend

• Next.js 15
• React
• TypeScript

Backend

• NestJS
• Node.js
• REST API
• WebSockets

Machine Learning

• Python
• FastAPI
• Scikit-learn
• PyTorch

Database

• MongoDB
• Redis

DevOps

• Docker
• Git
• GitHub

---

📂 Project Structure

CyberShield-AI/

├── frontend/
├── backend/
├── ml-service/
├── docker/
├── docs/
├── .github/
└── README.md

---

🚀 Getting Started

Clone Repository

git clone https://github.com/yourusername/CyberShield-AI.git
cd CyberShield-AI

Install Dependencies

Frontend

cd frontend
npm install

Backend

cd backend
npm install

ML Service

cd ml-service
pip install -r requirements.txt

---

▶️ Running the Project

Start Docker

docker compose up -d

Start Backend

npm run start:dev

Start ML Service

uvicorn main:app --reload --port 8000

Start Frontend

npm run dev

Visit:

http://localhost:3000

---

📌 Core Modules

• Threat Detection
• Threat Classification
• SOC Dashboard
• User Authentication
• Alert Management
• Case Investigation
• Threat Intelligence
• Database Management
• API Integration

---

🎯 Future Improvements

• SIEM Integration
• Role-Based Access Control
• Email & SMS Alerts
• Threat Intelligence APIs
• Explainable AI Predictions
• Cloud Deployment
• Kubernetes Support
• Performance Monitoring

---

📸 Screenshots

Add screenshots of:

• Login Page
• Dashboard
• Threat Detection Screen
• Alert Management
• Analytics
• ML Prediction Output

---

👨‍💻 Author

Ganesh Kondekar

B.Tech Information Technology

---

📜 License

This project is developed for educational and research purposes.