This project implements a Secure Web Gateway (SWG) which is a subpart of Secure Access Service Edge (SASE) framework, to provide secure, compliant, and controlled web access. The SWG acts as an intermediary between users and web resources, performing real-time traffic inspection, malware detection, URL filtering, and policy enforcement.
- ✅ URL Filtering: Blocks access to malicious or non-compliant websites.
- 🔄 Rule-Based Management: Enforces policies for secure browsing.
- 🌐 Domain-Based Filtering: Restricts access to certain domains based on organizational rules.
- 🔍 Threat Detection: Uses ClamAV for scanning downloaded content.
- 📊 Logging & Reporting: Tracks user activity and security incidents.
- Programming Languages: Golang, JavaScript
- Databases: MariaDB
- Security Tools: ClamAV, IPQS API (for domain/IP reputation checks)
- Frontend: EJS (templating), JavaScript
- Networking: HTTPS, DNS, TLS, TCP/IP
The Secure Web Gateway (SWG) is designed with a modular and scalable architecture, ensuring efficient traffic filtering, threat detection, and policy enforcement. The key components include:
- Web Proxy Layer: Intercepts and redirects web traffic for inspection.
- Threat Detection Engine: Uses ClamAV for scanning and malware detection.
- URL Filtering Module: Implements rule-based and domain-based filtering.
- Logging & Monitoring System: Captures and stores logs for analysis.
- Rule-Based Management: Allows administrators to define security policies.
- Define custom rules to allow or block specific websites based on security policies.
- All downloads are scanned using ClamAV before being accessed.
- ✅ AI-Driven Threat Detection using machine learning for advanced security.
- 🌍 Cloud-Based Deployment for scalable security across multiple locations.
- 🕵️ User Behavior Analytics for anomaly detection and proactive security.
- Akshat Verma
- Kanav
- Keshav Garg
- Sanya Sinha
- Dr. Keshav Sinha (Guide)