Apppublic

MGouthamreddy/security-logs-env

sourceHugging Facemitupdated 6mo agoView on Hugging Face

0likes

App README

Security Log Analysis Environment

OpenEnv environment for simulating SOC (Security Operations Center) analyst work - detecting and classifying security threats in system logs.

What Is This?

This environment simulates a real-world cybersecurity task: analyzing security logs to detect threats ranging from basic attacks (brute force, SQL injection) to sophisticated APT (Advanced Persistent Threat) campaigns.

Tasks

Task	Difficulty	Logs	Threats	Pass Threshold
Basic Attack Detection	Easy	10	5	80%
Advanced Threat Detection	Medium	20	10	70%
APT Campaign Detection	Hard	35	22	65%

API Endpoints

Endpoint	Method	Description
`/`	GET	Environment info
`/health`	GET	Health check
`/reset`	POST	Reset environment
`/step`	POST	Execute action
`/state`	GET	Get full state
`/score`	GET	Get current score
`/tasks`	GET	List available tasks

Environment Variables

Set these in Space Settings → Repository secrets:

Name	Value
`API_BASE_URL`	`https://router.huggingface.co/v1`
`MODEL_NAME`	`mistralai/Mistral-7B-Instruct-v0.3`
`HF_TOKEN`	yourhuggingfacetoken

Project Structure

security-logs-env/
├── models/types.py       # Pydantic models
├── tasks/tasks.py        # Task definitions
├── graders/graders.py    # Scoring logic
├── security_logs_env.py  # Main environment
├── inference.py          # Baseline inference
├── server.py             # FastAPI server
├── main.py               # Entry point
├── openenv.yaml          # OpenEnv config
├── Dockerfile            # Container config
└── requirements.txt      # Dependencies

License

MIT License

Built for the OpenEnv Hackathon

Detecting threats humans miss, at scale AI enables.