CyberWatch: A Real-Time Intelligent Web Security Monitoring and Attack Detection Platform

Abstract: CyberWatch is a real-time web security monitoring platform built to give defenders immediate visibility into web attacks. Implemented on Spring Boot, it inspects incoming requests and applies modular detectors for SQL injection, brute-force abuse, XSS, command injection, DDoS, CSRF, SSRF, malicious file upload, XXE, and LDAP injection. The implementation also includes log-injection and directory-traversal checks for broader operational coverage. All primary attack categories in project scope were implemented and validated using controlled test traffic. The platform captures contextual evidence, computes a weighted risk score, and streams prioritized alerts to a WebSocket dashboard for faster triage. Experimental results show a strong precision-recall balance with low latency overhead, indicating practical suitability for academic environments and small-to-mid production deployments.

Keywords: Web application security, attack detection, Spring Boot, real-time dashboard, cyber threat monitoring.