← Projects

Access Control Monitoring System

My team's OG&E-sponsored capstone: an app that finds improper employee access, flags it for review and shows the results in tables and graphs. I built the anomaly-detection engine.

Finished
  • Capstone
  • C#
  • Security
  • OG&E

Details

Role
Backend developer (anomaly-detection engine)
Team
5 people
Built with
C#, .NET, Blazor, MudBlazor, SQLite
Page updated

Overview

A team capstone sponsored by OGE Energy Corp (OG&E), built around a fictional company. The app looks at who has access to what, flags access that looks improper, and gives reviewers a place to work through those flags.

  • Access monitoring: analyses employee access and permissions and automatically flags possible violations.
  • Detected problems: flagged employees in interactive tables. Reviewers check each flag, mark it valid or dismiss it, and update its status.
  • Custom flags: add flags by hand for problems the system doesn't catch, and track them alongside the automatic ones.
  • Charts and tables: graphs and summaries that make the problems easier to spot.
  • Export: export the results for reports or further analysis.

My part

I worked on the backend, mainly the anomaly-detection engine in C#.

  • Five risk checks: inactive employees who still have access, non-managers holding privileged access, and statistical outlier checks that spot access grants unusual for someone's job role and department.
  • Permissions that go together: a confidence-scored algorithm that finds permissions which often appear together, and groups related ones for review using a graph-based approach.
  • Data in and out: the CSV import pipeline, and a SQLite storage layer that supports several imports, tracks the active one and writes in transactions.
  • Presenting it: I presented the design and technical approach to OGE Energy Corp engineering staff over several review sessions.

Contributors

  • Deacon @CrazyCase2473
  • Sam
  • Madigan
  • Matthew
  • Jesse

README

Show the README

Overview

The Access Control Monitoring System is a team-developed application designed to help organizations identify, review, and manage improper employee access within a fictional company environment.

The system analyzes employee access information, identifies potential security violations, and presents the results through interactive tables and visual data. Users can review flagged employees, determine whether detected problems are valid, create custom flags, update flag statuses, and export results for further analysis.

Features

Access Monitoring

  • Analyzes employee access and permissions
  • Identifies potentially improper or unauthorized access
  • Automatically flags potential access violations
  • Displays employees associated with detected problems
  • Provides detailed information for reviewing individual employees

Detected Problems

The Detected Problems section provides an interactive way to review access violations identified by the system.

  • Displays flagged employees in interactive tables
  • Allows users to select individual employees
  • Provides information about detected access problems
  • Allows users to validate or dismiss detected flags
  • Allows users to update the status of reviewed flags
  • Supports manual review of potential violations

Custom Flags

The system allows users to create and manage custom flags for situations that may not be automatically detected by the system.

  • Create custom access-related flags
  • Manually identify employees with potential problems
  • Add additional information to support the review process
  • Track custom flags alongside automatically detected problems
  • Update the status of custom flags as they are reviewed

Data Visualization

The application provides visual representations of access and security-related information to make potential problems easier to identify and understand.

  • Graphs for analyzing detected problems
  • Tables for organizing employee and access information
  • Visual summaries of flagged data
  • Interactive data displays for reviewing security findings

Flag Review and Management

Users can review each detected problem and determine how it should be handled. The system supports workflows for:

  1. Identifying potential access violations
  2. Reviewing flagged employees
  3. Examining individual access information
  4. Determining whether a flag is correct
  5. Validating or dismissing the flag
  6. Updating the flag's status
  7. Adding manually identified flags when necessary
  8. Exporting results for additional use

Data Export

The application allows users to export information generated during the access-monitoring process for reporting, analysis, or further review.

Technologies

  • C#
  • .NET
  • MudBlazor
  • Git
  • GitHub

← All projects