Problem
CISA’s 2022 catalog lists actively exploited vulnerabilities, but raw data alone does not guide a security analysis. The project had to connect trends, network exposure, phishing and data protection.
Idea
Build a layered study: visualize vulnerabilities, classify phishing emails, automate network reconnaissance and experiment with cryptographic functions.
Architecture
Python supports the analysis scripts. Qlik presents trends. Nmap discovers hosts, ports, versions and operating systems, while Scapy supports packet inspection. A notebook handles email classification.
Implementation
The work is split across Phishing_Email_classification.ipynb, Nmap scripts, Scapy exercises, encryption functions and Qlik dashboards.
Security
The approach combines detection, analysis and protection through network-surface inspection, suspicious-message recognition and secure encrypted-password handling.
Infrastructure
The environment can be reconstructed from the Python scripts and thematic folders. Analytical results are consolidated in the report and Qlik visuals.
Challenges
The main challenge is aligning heterogeneous signals: vulnerability records, email metadata, scan results and network packets.
Results
The project delivers four complementary workstreams, a risk-analysis report and visualizations for interpreting the CISA 2022 catalog.
Lessons
Useful security analysis combines data, network visibility and practical controls. Clear communication matters as much as the detection tool.
