Dixon Styres

secuPy

AI Tool to analyze network traffic in the effort to detect botnets.

secuPy uses KNN clasification to identify Botnet traffic on a psuedo live network setting. The classifier is trained on the CTU-13 dataset specifically in scenario 1 with the Neris Botnet.

Built with python 2.7

loader.py: loads in an Argus binetflow and converts relevant features to numpy arrays/pickles

model.py: KNN model

start.py: Train model and listen for network traffic to classify

TCPServer.py: Threaded TCPServer to send Argus logs that have been run through data.py into our listener.