Role
Lead Cybersecurity Engineer
Timeline
2023
Tech Stack
Elastic Stack / Suricata / Zeek / Python
Overview
This project involved architecting a real-time network intrusion detection system capable of monitoring and analyzing massive streams of telemetry securely.
The Challenge
The primary challenge was ensuring sub-100ms latency on the analytics dashboard while processing terabytes of network data without dropping packets.
The Solution & Architecture
By leveraging a highly optimized Elasticsearch cluster coupled with distributed Suricata sensors, we achieved complete network visibility and threat detection.
// VISUAL TELEMETRY
[ 03 SCREENSHOTS ]Interface & System Gallery
nidps // capture_01.png
SYSTEM_PREVIEW
Real-Time Intrusion Alert Telemetry & Spatial Geo-Distribution
FIG 01nidps // capture_02.png
SYSTEM_PREVIEW
Severity Distribution & Protocol Sensor Performance Dashboard
FIG 02nidps // capture_03.png
SYSTEM_PREVIEW
Deep Packet Inspection Logs & Automated Filtering Console
FIG 03