🔐 Secure Computing Systems Portfolio (7018SCN)

📌 Overview

This repository contains a portfolio of three custom Python-based security tools developed as part of the 7018SCN Secure Computing Systems coursework. The tools demonstrate practical implementation of secure authentication, threat detection, and malware analysis.

📂 Repository Structure

.
├── task1_authentication.py      # Secure login system
├── task2_siem.py                # SIEM Lite log analysis tool
├── task3_forensics.py           # Malware analysis & forensic tool
├── README.md

├── data/
│   ├── auth.log                # Sample log file
│   ├── test_file.txt           # File for malware testing

├── output/
│   ├── flagged_ips.json        # SIEM results

├── QUARANTINE_VAULT/           # Stores malicious files

⚙️ Requirements

Python 3.x
Required library:

pip install pillow

🔑 Task 1: Secure Authentication System

▶️ Description

A secure command-line authentication system that:

Enforces strong password policies using regular expressions
Uses secure hashing (SHA-256 / PBKDF2) with a unique 16-byte salt
Prevents brute-force attacks using time delay

▶️ Run

python task1_authentication.py

✅ Features

Password complexity enforcement (≥12 characters, includes number and special symbol)
Secure password hashing with salt
Login verification system
Anti brute-force delay mechanism

🌐 Task 2: SIEM Lite (Threat Detection)

▶️ Description

A lightweight SIEM tool that:

Parses log files
Extracts IP addresses using regex
Detects suspicious activity based on a dynamic threshold
Exports results in JSON format

▶️ Run

python task2_siem.py 2

(Replace 2 with your desired threshold)

✅ Features

Regex-based IP extraction
Dynamic threshold via command-line argument
Attack detection using frequency analysis
Structured JSON output for firewall integration

🛡️ Task 3: Malware Analysis & Digital Forensics

▶️ Description

A forensic tool that:

Safely hashes files using chunk-based reading
Detects malicious files using known signatures
Moves infected files to a quarantine vault
Extracts EXIF metadata from images

▶️ Run

python task3_forensics.py

✅ Features

Memory-safe SHA-256 hashing (4096-byte chunks)
Malware signature detection
Secure quarantine using shutil.move()
EXIF metadata extraction using Pillow

⚖️ Legal & Ethical Considerations

These tools are developed strictly for educational and authorised testing purposes only. Using similar tools without explicit permission may violate applicable cybersecurity laws such as the UK Computer Misuse Act (1990).

📊 Compliance Relevance

GDPR: Secure password hashing helps protect user credentials
ISO27001: Demonstrates implementation of security controls and incident detection mechanisms

⚠️ Disclaimer

This project is intended for academic use only. Any misuse of these tools in unauthorised environments is strictly prohibited.

bollas2/7018SCN-Portfolio

About

Resources

Stars

Watchers

Forks

Releases