Real-Time Anomaly Detection Engine for a Cloud Storage Platform

I built a Python daemon that watches incoming HTTP traffic in real time, learns what "normal" looks like, and automatically blocks attackers using Linux's built-in firewall — all without any third-party security tools. Imagine you run a cloud storage company. Your platform is public — anyone on the