Netshield IDS
A hands-on dive into network defense, built from the ground up.
NETSHIELD IDS is a Python-based Intrusion Detection System I developed to monitor network traffic and detect suspicious activity in real time. The goal was simple: create a lightweight, customizable tool that could recognize common attacks—like DoS, SQL injection, XSS, port scanning, and unauthorized access—while giving users control over how threats are identified and handled.
Built using Python and Scapy, the system captures live packets, applies custom detection rules, and logs all relevant events for analysis. It also features secure password-based authentication, making sure only authorized users can interact with the tool.
What makes NETSHIELD IDS stand out is its flexibility. Detection thresholds and rules can be edited directly in the config files, which makes it easy to adapt the system as threats evolve. Everything—from the rule engine to log management—was designed to be clear, efficient, and educational.
While it’s intended for learning and experimentation, this project pushed me to explore real-world security concepts and challenges. It’s been a deep technical journey into packet inspection, pattern detection, and secure systems design—and a rewarding one at that.
