Secure Login Monitoring Using an Authentication-Focused SIEM Architecture

Security threats targeting authentication systems have increased significantly with the expansion of digital platforms. Traditional login mechanisms are often vulnerable to brute-force attacks and unauthorized access, especially in small and medium-scale organizations lacking advanced security infrastructure. This project presents an Open-Source Security Information and Event Management (SIEM) based employee login and monitoring system designed to enhance authentication security and real-time threat detection. The system is developed using HTML and JavaScript for the frontend, Node.js for backend processing, and MongoDB for secure data storage. A key feature of the system is its brute-force attack detection mechanism, which automatically locks user accounts after multiple failed login attempts and generates instant SMS and email alerts using Twilio. By integrating log analysis, automated alerts, and secure authentication practices, the proposed system provides a cost-effective, scalable, and reliable security solution suitable for educational institutions and small enterprises.