How subhankit18/secureme-sih26155 works
SECUREME audits uploaded network-device configuration files without connecting to or executing commands on devices. The principal workflow is upload, deterministic vendor detection, vendor-specific parsing into normalized controls, validation, deterministic PASS/FAIL evaluation with risk and evidence, then optional Groq explanations and a report. The product also exposes review approval and re-audit, persisted audit history, and PDF downloads. The README documents the core workflow; source excerpts show API and persistence behavior, but some pipeline and reporting internals were not sampled.
Main entry points: pipeline.py Audit Pipeline · web_api.py Web API · compliance.py Compliance Evaluation · reaudit.py Re-audit
Components 18
User Interface
- Web API
web_api.py - Web Frontend
frontend/index.html
Configuration Analysis
- Audit Pipeline
app/pipeline.py - Vendor Detection
app/vendor_detection.py - Cisco Parser
app/parsers/cisco.py - Fortinet Parser
app/parsers/fortinet.py - Normalized Models
app/models.py - Config Validation
app/normalizer.py - Demo Controls
config/controls.json - Compliance Evaluation
app/compliance.py - Risk Scoring
app/risk_scoring.py - AI Assistance
app/ai/groq_service.py
Review and Reports
- Re-audit
app/reaudit.py - PDF Report
app/pdf_report.py - Terminal Report
app/pipeline.py
Audit Persistence
- Database Session
app/database.py - Audit Records
app/db_models.py
Other components
- Security Analyst
Connections 23
- Security Analyst → Web Frontend: uses
- Security Analyst → Web API: uploads config
web_api.py - Web API → Web Frontend: serves
web_api.py - Web API → Audit Pipeline: runs analysis
web_api.py - Audit Pipeline → Vendor Detection: detects vendor
app/pipeline.py - Audit Pipeline → Cisco Parser: parses Cisco
app/pipeline.py - Audit Pipeline → Fortinet Parser: parses Fortinet
app/pipeline.py - Cisco Parser → Normalized Models: builds config
app/parsers/cisco.py - Fortinet Parser → Normalized Models: builds config
app/parsers/fortinet.py - Audit Pipeline → Config Validation: validates config
app/pipeline.py - Audit Pipeline → Compliance Evaluation: evaluates controls
app/pipeline.py - Compliance Evaluation → Demo Controls: loads rules
README.md - Compliance Evaluation → Risk Scoring: scores failures
app/compliance.py - Audit Pipeline → AI Assistance: requests enrichment
app/pipeline.py - Audit Pipeline → Database Session: persists results
app/pipeline.py - Database Session → Audit Records: provides base
app/db_models.py - Web API → Database Session: uses session
web_api.py - Web API → Audit Records: reads reviews
web_api.py - Web API → Re-audit: requests re-audit
web_api.py - Re-audit → Compliance Evaluation: reevaluates controls
app/reaudit.py - Re-audit → Audit Records: reads and writes
app/reaudit.py - Web API → PDF Report: builds download
web_api.py - Audit Pipeline → Terminal Report: prints report
app/pipeline.py