SARAHAI-FIREWALL

1. Introduction
Welcome to SARAHAI-FWv1.5, an advanced firewall solution for Windows 11 that integrates patented anomaly detection and pattern recognition methods. The goal of this system is to capture, analyze, and autonomously respond to network traffic in real-time using concepts from U.S. Patent No. 11,308,384, exclusively licensed to Tensor Networks, Inc..
1.1 Key Features
1. Scapy-based Packet Capture: Monitors traffic at the network interface level (layer-2 or layer-3 fallback).
2. Patented Anomaly Detection: Uses a rolling window of packet data and advanced pattern recognition algorithms.
3. Autonomous (Agentic) Response: Automatically blocks suspicious IP addresses upon detecting repeated anomalies.
4. Web-Based Dashboard: A Flask application served via HTTPS with a self-signed certificate, including:
o Real-time traffic chart (Matplotlib)
o Recent traffic logs
o Geolocation map (Folium)
o ODS (OpenDocument Spreadsheet) log export
5. Log Rotation: Simple size-based rotation to prevent unbounded growth.
6. Windows Firewall Integration: Automated IP-blocking via netsh command.
7. Basic Authentication: Single admin user with hashed credentials, updatable via environment variables.