Threat state leads the page
The current investigation state is separated from the analytical grid so it can be understood before reading individual charts.
Security · Real-time visualization2024Front-end · Data visualization · Security research
ThreatSense
A security interface should shorten the distance between signal and decision.
A real-time network analysis dashboard that turns changing traffic signals into a focused investigation surface.
01 / Challenge
What needed to become clear.
Network monitoring produces several simultaneous signals. The challenge was to present traffic volume, suspicious activity, latency, and distribution without forcing the operator to assemble the story from disconnected charts.
- 01Continuously changing traffic data
- 02Several chart types with different visual scales
- 03A homelab environment spanning Kali, Ubuntu, and Wireshark
02 / Decisions
The product logic behind the interface.
Different views, shared cadence
Line, bar, area, and proportion views use consistent spacing and update rhythm to behave as one monitoring system.
Pause is part of analysis
The interface includes control over updates so a changing state can be inspected rather than merely watched.
03 / Architecture
A visible path through the system.
Homelab network traffic and Wireshark research
Python-based traffic classification
Timed monitoring updates and alert state
Dash and Plotly analytical views
04 / Outcome
ThreatSense turned a collection of network measurements into a single interface for observing, pausing, and investigating suspicious traffic patterns.