Skip to content

Intelligent Threat Detection in Virtual Networks

Welcome to the official documentation for the VNTD project.

This platform is designed to deploy a modular, scalable, and fully virtualized cybersecurity laboratory. By simulating a segmented enterprise infrastructure, this project facilitates the generation of real network traffic, the execution of simulated attacks, and the analysis of security logs using Artificial Intelligence.

Open Source

This project relies on open-source technologies such as Linux, Docker, and Containerlab to ensure accessibility and reproducibility and ease access to research on network simulation and threat detection.

Project Context

This project is developed as a Final Degree Project (Treball de Final de Grau - TFG) for the Degree in Computer Engineering in Information Systems and Management at TecnoCampus (Pompeu Fabra University).

It addresses the growing need for accessible research environments in cybersecurity. Traditional physical labs are expensive, difficult to scale and hard to reproduce. This project addresses these limitations by making use of container and network emulation technologies.

Project Information

Author: Marc Chamorro Mollon
Tutor: Pere Barberan Agut
Academic Year: 2025–2026
License: Open Source


Project Resources

View on GitHub

Download Full Documentation (PDF)


  • Virtualization & Orchestration


    Utilizing Docker and Containerlab to create lightweight and reproducible network nodes that represent realistic infrastructures.

  • Intelligent Analysis


    Integrating Machine Learning techniques to detect anomalies and suspicious patterns in network logs that traditional systems might miss.

  • Real-World Simulation


    Implementing real services (SSH, FTP, HTTP, MAIL) and security tools (Suricata) to generate and monitor real traffic and logs.


Documentation Roadmap

The documentation is organized to guide you from initial setup to advanced usage: