release-ad-v2.3

Example of an anomaly detection function that analyzes SSH authentication attempts using machine learning and rule-based validation.

The system monitors SSH authentication logs (auth.log) and GPS location, and uses an Decison Tree algorithm combined with rule-based validation to detect suspicious activities. The detection function is offloaded for execution, while automated responses are handled locally by a Response Daemon.

release-ad-v2.0

Implementation of the anomaly detection about entries of the authentication log file.

This version implements the anomaly detection using a decision tree.

release-ad-v1.0

This version include the first iteration of the proof of concept of Cybersecurity UseCase. It contains the following elements:

• An anomaly detection function based on ssh connection attempts.
• An example log file (auth.log)
• Modified docker files

Full Changelog: https://github.com/SovereignEdgeEU-COGNIT/use-case-4/commits/1.0