A Python-based application that leverages software defined networks (SDN) to acquire and then feed network traffic to a number of learning techniques. Poseidon’s goal is to have machine learning algorithms that predict both the type of device and if it acts normally or abnormally.

We believe that the widespread adoption of Software-Defined Networks (SDN) is inevitable. However, most SDN offerings lack security emphasis, much less methods to enhance operational security, without situational awareness and context, defending a difficult proposition. SDN has the potential to provide network defenders with powerful new capabilities, as well as augment defensive action.

This project utilizes both SDN and machine learning techniques to answer two questions:

1. What is on the network; and
2. What is it doing?

This project is a joint effort between two IQT Labs: Lab41 and Cyber Reboot.