DATASHIELD – UNIFIED SECURITY LOGGING AND THREAT INTELLIGENCE PLATFORM

This paper presented DataShield, a unified security logging and threat intelligence platform that consolidates log ingestion, normalization, rule-based threat detection, alert management, and incident investigation within a single containerized web application [16], [17], [20], [26]. The platform directly addresses the fragmentation, cost, and usability limitations of existing SIEM solutions by delivering an open-source, Docker-deployable system built on React.js, Node.js, PostgreSQL, OpenSearch, and Fluent Bit [10], [11], [12], [13], [14], [15], [18]. Empirical evaluation demonstrated consistent performance across 100 scan cycles, processing 8,035 log entries with a 100% normalization and alert-save rate, detecting 1,117 threats with zero errors. The multi-phase testing strategy validated functional correctness across all modules with a 100% pass rate [35]. The modular architecture and clean API boundaries ensure that DataShield can be extended with machine learning-based anomaly detection, additional log source integrations, and automated response capabilities in future iterations [2], [21], [22]. DataShield establishes a practical, extensible foundation for organizations seeking to improve security visibility, reduce analyst workload, and accelerate incident response without the financial and operational overhead of commercial SIEM platforms [16], [18], [19], [20]. The platform is available for deployment and further development as a contribution to the open-source cybersecurity community.

 [1] C. Sanders and J. Smith, Applied Network Security Monitoring: Collection, Detection, and Analysis. Syngress Publications, 2014. [2] M. Kleppmann, Designing Data-Intensive Applications. O'Reilly Media, 2017. [3] OWASP Foundation, "OWASP Top 10 – 2021: The Ten Most Critical Web Application Security Risks," 2021. [Online]. Available: https://owasp.org/www-project-top-ten/ [4] J. Andress, The Basics of Information Security: Understanding the Fundamentals of InfoSec in Theory and Practice, 3rd ed. Syngress Publications, 2020. [5] M. T. Goodrich and R. Tamassia, Introduction to Computer Security. Pearson Education, 2014. [6] W. Stallings, Network Security Essentials: Applications and Standards, 6th ed. Pearson Education, 2017. [7] C. P. Pfleeger and S. L. Pfleeger, Security in Computing, 5th ed. Pearson Education, 2015. [8] B. Schneier, Applied Cryptography: Protocols, Algorithms, and Source Code in C. John Wiley & Sons, 2015. [9] A. Silberschatz, H. F. Korth, and S. Sudarshan, Database System Concepts, 7th ed. McGraw-Hill Education, 2020. [10] OpenSearch Project, "OpenSearch Documentation," 2024. [Online]. Available: https://opensearch.org/docs/latest/