01 / DETECT
⌁
Behavioral Detection
Analyze system and web-server logs to identify suspicious patterns and anomalies.
Deception-driven cybersecurity / 01
DETECT.
DIVERT.
UNDERSTAND.
Give suspicious activity somewhere else to go. DecoyGuard brings deception and behavioural analysis together to make threats easier to investigate.
Detect / Deceive / Analyze
INCOMING / TRAFFIC
DECOY / ENVIRONMENT
DG / DECEPTION SYSTEM● ◌ ● ◌ ●
SECURITY THROUGH DECEPTIONSCROLL TO EXPLORE ↓
01 / The framework
ABOUT DECOYGUARD
DecoyGuard is a two-layer security framework that brings together honeypot-based deception and log-based behavioral threat detection. It is designed to identify suspicious activity, observe unauthorized access attempts, and provide security teams with clearer visibility into potential threats.
02 / Our technology
A SMARTER
APPROACH TO SECURITY.
Three complementary capabilities. One coordinated approach to understanding malicious activity.
02 / DECEIVE
⬡
Honeypot Environments
Use realistic decoy services to observe and record unauthorized interactions.
03 / ANALYZE
▥
Threat Intelligence
Track attacker activity, source information, and threat events to support investigation and reporting.
03 / How it works
SAME TRAFFIC.
DIFFERENT DESTINATION.
DecoyGuard assesses activity for suspicious patterns and supports deception-based handling, helping separate legitimate services from controlled decoy environments.
INCOMING WEB TRAFFIC
↓
Traffic assessmentDetection & routing
↗ LEGITIMATE SERVICEExpected requests
↘ DECOY ENVIRONMENTSuspicious interactions
Conceptual architecture illustration; actual handling depends on deployment configuration.
Our purpose / 03
THREE GOALS.
ONE MISSION.
From early detection to meaningful evidence, each layer has a purpose.
Deception-based detection
Simulate decoy environments that attract and detect unauthorized access attempts early.
Behavioural analysis
Monitor activities and analyse logs for suspicious patterns in real time.
Evidence & reporting
Present detected behavioural threats and generate reports for investigation.
04 / Controlled demonstrations
TEST ENVIRONMENTS
Explore two application scenarios used to evaluate deception and detection workflows.
Environment 01
OWASP Juice Shop
An intentionally vulnerable application used for authorized security testing and training.
View setup instructions ↗Environment 02
Banking Demonstration
A simulated banking application for controlled testing with synthetic data.
View setup instructions ↗05 / Get started
DEPLOY DECOYGUARD.
Set up DecoyGuard in an authorized local or lab environment. Follow the installation steps and connect your test applications through the configured gateway.
A verified public download URL has not yet been configured.
INSTALLATION OVERVIEW
✓ Python runtime and dependencies
✓ Docker Desktop for lab applications
✓ Playwright browser setup
✓ Local gateway configuration
✓ Authorized testing environment
06 / The people
MEET OUR TEAM
Farazilawati Baizura
Binti Mohd Pooad
Supervisor
Aiman Danish Bin
Mohd Khairunnizam
CBS24070471
Log-Based Threat Detection
Muhammad Ryan Bin Hifzi
CBS24070151
Project Leader & System Integration
Puteri Nia Natasya Binti
Mohamad Syahril
CBS24070728
Honeypot / Deception Layer, Dashboard
Nur Sabrina Lutfiah
Binti Nurmohamad
CBS24070261
Dashboard, Alerts & Documentation