Incoming Network Traffic

Data Acquisition & Preprocessing

Feature Extraction 78 features

One-Hot Encoding

Min-Max Scaling

Stage 1: Rule-Based Filtering (SBU) Match Known Signatures?

Stage 2: Deep Learning Anomaly Detection (LSTM)

Is Traffic Anomalous/Malicious? (Determine Confidence Score C)

Allow Traffic

Check Confidence Score (C)

Action: Immediate TCP Reset & Firewall IP Block

Action: VLAN Isolation & Administrator Alert

Action: Log for Detailed Forensic Analysis

Threat Mitigated