Mansour-Wajdi/Enhancing_Intrusion_Detection_with_SecurityOnion_using_ML

This project aims to enhance intrusion detection using Security Onion by integrating machine learning models for improved alert prioritization.

/ 100

Experimental

This project helps cybersecurity analysts reduce 'alert fatigue' by filtering out false alarms from their Security Onion intrusion detection system. It takes raw network alerts and packet capture (PCAP) files as input, processes them, and outputs prioritized alerts indicating true threats. Security operations center (SOC) analysts and incident responders are the primary users.

No commits in the last 6 months.

Use this if you are a security analyst overwhelmed by a high volume of false positive alerts from your Security Onion IDS and need to focus on genuine threats.

Not ideal if you are looking for a standalone intrusion detection system, as this project enhances an existing Security Onion deployment.

cybersecurity intrusion-detection security-operations alert-management network-security-monitoring

No License Stale 6m No Package No Dependents

Maintenance 0 / 25

Adoption 4 / 25

Maturity 8 / 25

Community 9 / 25

How are scores calculated?

Stars

Forks

Language

Jupyter Notebook

License

—

Higher-rated alternatives

AIS-Package/aisp

Artificial Immune Systems Package (AISP) is an open-source Python library that features...

ubc-provenance/PIDSMaker

A framework for building provenance-based intrusion detection systems with neural networks

Western-OC2-Lab/Intrusion-Detection-System-Using-Machine-Learning

Code for IDS-ML: intrusion detection system development using machine learning algorithms...

zimingttkx/Network-Security-Based-On-ML

abhinav-bhardwaj/Network-Intrusion-Detection-Using-Machine-Learning

A Novel Statistical Analysis and Autoencoder Driven Intelligent Intrusion Detection Approach

Explore ML Frameworks

All categories Trending ML Framework directory Insights