AI-Assisted Adaptive Firewall with SIEM Analytics

A firewall prototype that analyzes real network traffic with Zeek, detects anomalies using an unsupervised Isolation Forest model, and emits SIEM-ready security events with severity scoring.

Stack

• Python
• Zeek
• scikit-learn
• Isolation Forest
• FastAPI
• Elastic Stack
• PostgreSQL
• Docker