Spaces:
Running
Running
File size: 6,911 Bytes
0785be0 b78ea6e 0785be0 90f858e 617e380 d824eb3 0785be0 b78ea6e 0785be0 b3c5e03 617e380 b3ce1b2 617e380 b3ce1b2 0785be0 617e380 90f858e 617e380 b3ce1b2 617e380 b3ce1b2 617e380 90f858e b3ce1b2 617e380 b3ce1b2 0785be0 b3ce1b2 0785be0 90f858e 78f91c5 b78ea6e 90f858e b3c5e03 b78ea6e b3c5e03 b78ea6e 90f858e d824eb3 90f858e b78ea6e 90f858e b78ea6e 90f858e 78f91c5 90f858e b78ea6e d824eb3 b3c5e03 b78ea6e d824eb3 b3c5e03 d824eb3 b3c5e03 b78ea6e b3c5e03 b78ea6e b3c5e03 b78ea6e b3c5e03 b78ea6e b3c5e03 b78ea6e 90f858e d824eb3 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 | import pandas as pd
import plotly.express as px
from plotly.subplots import make_subplots
import plotly.graph_objs as go
import streamlit as st
import polars as pl
from sklearn.preprocessing import StandardScaler
from sklearn.preprocessing import OneHotEncoder
from sklearn.cluster import KMeans
from sklearn.decomposition import PCA
if "parsed_df" not in st.session_state:
st.session_state.parsed_df = None
# Page title
st.title("Analytics")
# Loading data
if st.session_state.parsed_df is None:
st.info("Please upload a log file on the 'Upload' page.")
st.stop()
data = st.session_state.parsed_df
data = data.select(["portdst","protocole","rule","action"])
# Sélectionner toutes les colonnes numériques
quanti = data.select(pl.col(pl.Int64))
# Sélectionner toutes les colonnes de type chaîne
quali = data.select(pl.col(pl.String))
##############################################
#### Preprocessing ####
##############################################
# Normalisation des données quanti (Standardisation : moyenne = 0, écart-type = 1)
scaler = StandardScaler()
data_quanti = scaler.fit_transform(quanti.to_pandas())
# Convertir de nouveau en DataFrame Polars
data_quanti = pl.from_pandas(pd.DataFrame(data_quanti, columns=quanti.columns))
# Encodage one-hot des données quali
encoder = OneHotEncoder(sparse_output=False)
data_quali = encoder.fit_transform(quali.to_pandas())
col_names = [
f"{feature}_{category}"
for feature, categories in zip(quali.columns, encoder.categories_)
for category in categories
]
# Convertir de nouveau en DataFrame Polars
data_quali = pl.from_pandas(pd.DataFrame(data_quali, columns=col_names))
df = pl.concat([data_quanti, data_quali], how="horizontal")
###############################################
#### Clustering ####
###############################################
if st.button("Start clustering"):
if st.session_state.parsed_df is not None:
with st.spinner("Searching the clusters..."):
try:
# Appliquer K-Means avec k optimal choisi
k_optimal = 2 # Par exemple, supposons que k = 3
kmeans = KMeans(n_clusters=k_optimal, random_state=42)
preds = kmeans.fit_predict(df.to_pandas())
df_clust = df.with_columns(pl.Series(values=preds, name='cluster_kmeans'))
if df_clust.shape[0] > 200000: # 200k
perc = 200000/df_clust.shape[0]
else:
perc = 1
df_ech = pl.from_pandas(df_clust.to_pandas()
.groupby("cluster_kmeans", group_keys=False)
.apply(lambda x: x.sample(frac=perc, random_state=42))
)
###############################################################
#### Visualisation des clusters ####
###############################################################
# Visualisation des clusters (en 2D avec PCA)
pca = PCA(n_components=2)
df_pca = pca.fit_transform(df_ech.to_pandas())
fig = px.scatter(
x=df_pca[:, 0],
y=df_pca[:, 1],
color=df_ech['cluster_kmeans'],
color_continuous_scale='viridis',
title='Clustering coupled with PCA',
labels={'x': 'Component 1', 'y': 'Component 2', 'color': 'Cluster'},
)
fig.update_layout(
xaxis_title='Component 1',
yaxis_title='Component 2'
)
# fig.show()
st.plotly_chart(fig, use_container_width=True)
except Exception as e:
st.error(f"An error occured while doing the clustering : {e}")
with st.spinner("Performing some more data analysis..."):
try:
data = data.with_columns(pl.Series(name="cluster_kmeans", values=df_clust.select("cluster_kmeans")))
# Analyse des variables qualitatives par cluster
for col in quali.columns: # protocole, action
fig = make_subplots(rows=1, cols=2)
data_filtered = data.filter(pl.col("cluster_kmeans") == 0)
freq_df = data_filtered.group_by(col).agg(pl.count(col).alias("frequency"))
fig.add_trace(
go.Bar(x=freq_df[col], y=freq_df['frequency'], name='Cluster 0',
marker=dict(color='rebeccapurple')),
row=1, col=1
)
data_filtered = data.filter(pl.col("cluster_kmeans") == 1)
freq_df = data_filtered.group_by(col).agg(pl.count(col).alias("frequency"))
fig.add_trace(
go.Bar(x=freq_df[col], y=freq_df['frequency'], name='Cluster 1',
marker=dict(color='gold')),
row=1, col=2
)
fig.update_layout(
title=f'{col} frequencies by cluster',
xaxis_title='Category',
yaxis_title='Frequency',
showlegend=True
)
st.plotly_chart(fig, use_container_width=True)
# Analyse de la variable quantitative par cluster
for col in quanti.columns: # protocole, rule, action
fig = make_subplots(rows=1, cols=2)
data_filtered = data.filter(pl.col("cluster_kmeans") == 0)
# Ajouter le premier histogramme
fig.add_trace(
go.Histogram(x=data_filtered[col], name="Cluster 0", marker_color="rebeccapurple"),
row=1, col=1
)
data_filtered = data.filter(pl.col("cluster_kmeans") == 1)
# Ajouter le deuxième histogramme
fig.add_trace(
go.Histogram(x=data_filtered[col], name="Cluster 1", marker_color="gold"),
row=1, col=2
)
# Mettre à jour la mise en page pour améliorer l'apparence
fig.update_layout(
title_text=f"Histograms of {col}",
showlegend=True,
)
st.plotly_chart(fig, use_container_width=True)
except Exception as e:
st.error(f"An error occured while doing the data analysis : {e}")
else:
st.warning("Please parse the log file first.") |