Back to work
Passive Traffic Analysis
01 / 03
A list of open ports is not enough. My Rust tool finds known vulnerabilities for them and links them to what is actually happening on the network.
- Type
- Bachelor’s thesis · security
- Year
- 2026
- Technology
- Rust · TypeScript · Nmap · Zeek · Suricata · PostgreSQL · CI / testy · UI / UX
- In numbers
- 27,000 lines of Rust
- 60 tests
- defended 2026
- Visit
- GitHub ↗
What is inside
- 01
Nothing slips through
Across 242 test scenarios the tool caught everything it should, at 0.988 precision.
- 02
What to fix first
It combines the network inventory, vulnerability data (CVE, EPSS, KEV) and Zeek and Suricata traffic into a ranked list of what to fix first.
- 03
Audit-ready evidence
Every report carries a SHA-256 manifest, so it can later be shown to be untouched.
- 04
Data stays on the network
Detection is deterministic. An optional local model only explains the findings and sends nothing out.