Skip to content

WIP - Feat: anomaly detection#91

Open
DiegoGuidaF wants to merge 14 commits into
mainfrom
feat/anomaly_detection
Open

WIP - Feat: anomaly detection#91
DiegoGuidaF wants to merge 14 commits into
mainfrom
feat/anomaly_detection

Conversation

@DiegoGuidaF

Copy link
Copy Markdown
Owner

Add anomaly detection feature. Since the main issue with the PulseWeaver security model is having unexpected users that share the same IP, I want to have some form of anomaly detection (purely statistic for now which I think should be more than enough in most cases). These anomalies would be something like

  • Denied traffic from an IP that was assigned to a user & device but expired - This means a user had an IP they were still using expired
  • Traffic from another country that is not the usual for a user - This means we might have some issue or the user travelled (VPN could also be the case in most cases)
  • Traffic from the same IP but an unusual user-agent header for it
  • ... more cases as I implement & think about it

For now this PR has only the backend, but the frontend will be able to show them and a notification system is planned later to properly notify administrators and allow them to react quickly.

[x] - Backend with main anomalies that should be notified

[] - Frontend showing the anomalies and allowing/suggesting an action

@DiegoGuidaF
DiegoGuidaF force-pushed the feat/anomaly_detection branch from 88300eb to d1588d7 Compare July 9, 2026 17:45
@DiegoGuidaF
DiegoGuidaF force-pushed the feat/anomaly_detection branch from d1588d7 to 3d28220 Compare July 11, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant