InsiderShield - Cloud Insider Threat detection

Logo
Project Architecture

Inspiration

The inspiration behind InsiderShield - Cloud Insider Threat Detection is deeply rooted in a personal experience within our team. One of our teammates shared a poignant story about their family-owned IT company, Bexcode Services, encountering an alarming situation. Within two months, they uncovered that an employee was engaged in data theft and potentially malicious activities.

This firsthand experience was a stark reminder of organizations' vulnerabilities, even from within their trusted circles. It underscored the importance of proactive safeguards for sensitive data and digital assets.

What it does

InsiderShield is a robust and sophisticated tool designed to detect, monitor, and respond to insider threats within cloud-based infrastructures. It continuously analyzes user behavior, access patterns, and data usage to identify suspicious activities. By leveraging advanced data algorithms and real-time monitoring, it offers organizations the ability to stay one step ahead of potential insider threats.

How we built it

InsiderShield was crafted using cutting-edge technologies, including Python, AWS (Amazon Web Services), Taipy (to create Threat Dashboard). These technologies were carefully selected to ensure scalability, reliability, and seamless integration into cloud environments.

Challenges we ran into

During the development of InsiderShield, our team encountered various technical challenges, including bugs and unexpected issues. Debugging and resolving these challenges were time-consuming but instrumental in enhancing the tool's stability and effectiveness. Our commitment to addressing these hurdles ultimately led to a more robust solution.

Accomplishments that we're proud of

The InsiderShield team takes immense pride in creating an advanced engine that enables the dissection of large datasets containing securities and street IDs. This achievement represents a significant step forward in cloud insider threat detection. While there is always room for improvement in any software project, we believe we've developed something unique and valuable.

What we learned

The development of InsiderShield was a profound learning experience for our team. We gained expertise utilizing advanced technologies to build a powerful tool capable of tackling complex cybersecurity challenges. This project has deepened our understanding of insider threats and the importance of proactive security measures.

What's next for InsiderShield - Cloud Insider Threat detection

Our next step is to take InsiderShield to the market and make it available to organizations seeking to fortify their cloud security. We are excited about the opportunity to help businesses across industries safeguard their digital assets and maintain the integrity of their data. Our vision is to see InsiderShield widely adopted as an essential component of modern cybersecurity strategies.

Built With

Submitted to

ShellHacks 2023

Created by

I worked on scripting and automating extraction of unusual log data from cloud infrastructure, leveraged Taipy to visualize the Insider threat intel data using dashboards.

Shiva Kumar Gosula
Cybersecurity Geek
I played a pivotal role in project management, ensuring code compilation and facilitating effective communication to keep all team members aligned.

Emily Vargas
I leveraged my data analysis, data manipulation and data structure skills to create a well informed and organized database using Pandas to detect malicious activity.

Mahi Patel
I worked on creating the dashboard using Taipy. It was relatively new module, but it was a huge learning curve :)

Triveni Morla