nadhirfr / rf-ids

Machine Learning Based - Intrusion Detection System

Random Forest - IDS

This is an Intrution Detection System with Machine Learning Based (Random Forest). This IDS used to detect DDoS Attack in Software-Defined Network with utilizing sFlow-RT (sFlow protocol). The analyze of Machine Learning Model can be found here: https://github.com/nadhirfr/cic-ids-2018

Feature:

• Django Framework
• API (WebSocket and HTTP)
• Realtime Attack Alert
• Read Traffic from sFlow-RT
• Full async process (Django-Channels)

Dashboard Log

HTTP API Documentation:

URL :	http://ip_address/api/?sec=latestLog&limit=limitShow
Method :	GET
Example :	http://127.0.0.1/api/?sec=10&limit=5
	Get 5 data in last 10 seconds

GET status of service : http://ip_address/api/status/

WS Access URL : ws://ip_address/ws/api/