Dynamic Cybersecurity Defense: A Real-Time Approach with Zeek and Metasploit

Abstract

This research presents a real-time cybersecurity defense system integrating Zeek, Metasploit, and a Security Information and Event Management (SIEM) platform to enhance threat detection, reduce false positives, and improve response times. Zeek is used for real-time traffic monitoring, Metasploit simulates attack scenarios, and SIEM consolidates and analyzes data for alerting. Experimental evaluation demonstrates improved detection accuracy (91%) and reduced false positives (7%).