HomeCybersecurityBotnet Detection: Z-Score Anomaly Detector on a Live Network

Botnet Detection Simulator

Interactive botnet detection simulator: watch infected hosts beacon to a command-and-control server, tune a z-score anomaly detector to flag suspicious nodes, and click to quarantine bots while balancing false positives against missed detections.

Cybersecurity3DModerate60 FPS
botnet-detection ↗ Open standalone

A simulated network of hosts exchanges quiet, low-frequency traffic — until a fraction of them are compromised and start beaconing to a command-and-control server on a tight, regular schedule. A rolling z-score detector watches every host's packet rate against the population and flags statistical outliers, letting you see, in real time, the trade-off between catching bots quickly and drowning in false positives. Tune the infection rate, lateral spread speed and detector threshold, then click flagged hosts to quarantine them and watch the anomalous traffic subside.

⚙ Under the hood

A 3D network of ~120 hosts exchanges quiet baseline traffic while a tunable fraction beacons to a command-and-control server on a fixed interval. A rolling-window z-score detector flags statistical outliers in real time; click flagged hosts to quarantine them and watch anomalous traffic subside.

Three.jscybersecuritybotnetanomaly detectionz-scoreInstancedMeshnetwork security

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install

What did you find?

Add reproduction steps (optional)