DroidDetector is a native Android application developed in Kotlin that monitors incoming network traffic in real-time to detect potential DDoS attacks. Using Android's VPN service, the app analyzes every network packet and applies advanced detection algorithms to identify threats.

🎯 Use Cases

• 🔍 Network Monitoring - Real-time traffic surveillance
• ⚠️ Threat Detection - Identification of DDoS and SYN Flood attacks
• 📊 Statistical Analysis - Connection tracking and packet rates per IP
• 🔔 Instant Alerts - Notifications for critical threats
• 🎓 Cybersecurity Education - Educational tool to understand network attacks

🔐 Advanced Detection

• ✅ SYN Flood Detection - Identifies SYN packets without ACK (threshold: 80 packets)
• ✅ Packet Rate Analysis - Monitors abnormal traffic spikes (threshold: 100 packets/s)
• ✅ Connection Monitoring - Alerts on excessive simultaneous connections (threshold: 50 IPs)
• ✅ Threat Classification - Levels: Normal, Medium, High, Critical

🎨 User Interface

• ✅ Real-time Dashboard - Live statistics and packet counters
• ✅ Suspicious IP List - RecyclerView with details for each connection
• ✅ Color Coding - Visual indication of threat level

🔔 Alert System

• ✅ Push Notifications - Instant alerts for detected threats
• ✅ Foreground Service - Continuous background monitoring
• ✅ Threat History - Logs of suspicious IPs with timestamps

🛠️ Performance

• ✅ Optimized Processing - Analysis of thousands of packets per second
• ✅ Memory Management - Automatic cleanup of old statistics
• ✅ Thread Safety - ConcurrentHashMap usage for concurrency