https://github.com/gr3edydevel0per/securewebgateway
https://github.com/gr3edydevel0per/securewebgateway
golang goproxy proxy sase swg waf
Last synced: about 1 month ago
JSON representation
- Host: GitHub
- URL: https://github.com/gr3edydevel0per/securewebgateway
- Owner: gr3edydevel0per
- Created: 2024-10-28T12:07:02.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-08-08T11:03:15.000Z (10 months ago)
- Last Synced: 2025-12-25T21:00:58.059Z (5 months ago)
- Topics: golang, goproxy, proxy, sase, swg, waf
- Language: EJS
- Homepage:
- Size: 906 KB
- Stars: 0
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Secure Web Gateway
## 📌 Overview
This project implements a **Secure Web Gateway (SWG)** which is a subpart of **Secure Access Service Edge (SASE) framework**, to provide **secure, compliant, and controlled web access**.
The SWG acts as an intermediary between users and web resources, performing **real-time traffic inspection, malware detection, URL filtering, and policy enforcement**.
## 🔍 Features
- ✅ **URL Filtering**: Blocks access to malicious or non-compliant websites.
- 🔄 **Rule-Based Management**: Enforces policies for secure browsing.
- 🌐 **Domain-Based Filtering**: Restricts access to certain domains based on organizational rules.
- 🔍 **Threat Detection**: Uses **ClamAV** for scanning downloaded content.
- 📊 **Logging & Reporting**: Tracks user activity and security incidents.
## 🛠️ Technologies Used
- **Programming Languages**: Golang, JavaScript
- **Databases**: MariaDB
- **Security Tools**: ClamAV, IPQS API (for domain/IP reputation checks)
- **Frontend**: EJS (templating), JavaScript
- **Networking**: HTTPS, DNS, TLS, TCP/IP
## ⚙️ System Architecture
The Secure Web Gateway (SWG) is designed with a **modular and scalable architecture**, ensuring **efficient traffic filtering, threat detection,
and policy enforcement**. The key components include:
1. **Web Proxy Layer**: Intercepts and redirects web traffic for inspection.
2. **Threat Detection Engine**: Uses ClamAV for scanning and malware detection.
3. **URL Filtering Module**: Implements rule-based and domain-based filtering.
4. **Logging & Monitoring System**: Captures and stores logs for analysis.
5. **Rule-Based Management**: Allows administrators to define security policies.
## 📜 Usage Guide
### Rule-Based Filtering
- Define custom rules to allow or block specific websites based on security policies.
### Threat Detection
- All downloads are scanned using ClamAV before being accessed.
## 🚀 Future Enhancements
- ✅ AI-Driven Threat Detection using machine learning for advanced security.
- 🌍 Cloud-Based Deployment for scalable security across multiple locations.
- 🕵️ User Behavior Analytics for anomaly detection and proactive security.
## 🤝 Contributors
- **Akshat Verma**
- **Kanav**
- **Keshav Garg**
- **Sanya Sinha**
- **Dr. Keshav Sinha (Guide)**