ANOMALY-BASED THREAT DETECTION AND REAL-TIME ISOLATION SYSTEM IN NETWORK TRAFFIC.

Abstract

The invention is a system that provides anomaly-based threat detection and real-time isolation in network traffic. The system includes a Network Traffic Monitoring Module (1), Behavioral Analysis and Learning Unit (2), Threat Scoring and Decision Mechanism (3), Dynamic Isolation Controller (4), Threat Database and Update Service (5), and Network Management Interface (6). The system continuously learns the normal behavioral pattern of network traffic, identifies deviations from this pattern as anomalies, and performs automatic isolation based on the risk score. In this way, threats, including zero-day attacks, are quickly neutralized without damaging the network.