🛡️ CyberAI Shield

AI-Powered Cybersecurity Threat Detection & Incident Response Platform

CyberAI Shield is an end-to-end cybersecurity solution that analyzes security logs, detects anomalies using Machine Learning, enriches threats with intelligence feeds, and generates AI-powered incident reports and remediation recommendations.

🚀 Features

• 📂 Log File Ingestion (CSV, JSON, LOG)
• 🤖 Isolation Forest-Based Anomaly Detection
• 🔍 SHAP Explainability for Threat Analysis
• 🌐 Threat Intelligence Integration (AbuseIPDB)
• 📊 Alert Prioritization & Risk Scoring
• 📝 AI-Generated Incident Reports (Groq LLM)
• 🛡️ Automated Remediation Playbooks
• 🎯 MITRE ATT&CK Mapping
• 📈 Real-Time Analytics Dashboard
• 🔗 SIEM Integration Support

🛠️ Tech Stack

Backend

• FastAPI
• Python
• SQLAlchemy
• Scikit-learn
• SHAP
• Groq LLM

Frontend

• HTML
• CSS
• JavaScript
• Chart.js

⚙️ Installation

git clone https://github.com/yourusername/cyberai-shield.git
cd cyberai-shield

pip install -r requirements.txt

uvicorn main:app --reload

📡 Core Workflow

Log Upload
    ↓
Feature Engineering
    ↓
Isolation Forest Detection
    ↓
SHAP Explainability
    ↓
Threat Intelligence Enrichment
    ↓
Risk Scoring
    ↓
AI Incident Report
    ↓
Remediation Recommendations

🎯 Key Capabilities

• Detect suspicious activities from uploaded logs
• Explain why an event was flagged
• Generate human-readable incident reports
• Prioritize alerts based on severity
• Recommend automated response actions
• Visualize threats through an analytics dashboard

🔐 Security Features

• AES-256 Encryption
• JWT Authentication
• Role-Based Access Control (RBAC)
• Compliance Report Generation

👥 Team

Developed for the AI Cybersecurity Threat Report Generator Hackathon.

📄 License

MIT License

⭐ Star this repository if you find it useful!