Update app.py

app.py

@@ -8,36 +8,45 @@ def predict(duration, src_bytes, dst_bytes, failed_logins,
             count, error_rate, same_srv_rate, diff_srv_rate,
             host_count, login_attempts):
     
-    # Convert input into array
     data = np.array([
         duration, src_bytes, dst_bytes, failed_logins,
         count, error_rate, same_srv_rate, diff_srv_rate,
         host_count, login_attempts
     ])
     
-    # Simple logic (for demo)
     score = np.sum(data)
-    result = 1 if score > 50 else 0
-
-    # Interpretation
-    if result == 1:
-        return (
-            "⚠️ **Attack Detected!**\n\n"
-            f"Risk Score: {score:.2f}\n\n"
-            "The network behavior appears suspicious.\n"
-            "Possible reasons:\n"
-            "- High traffic volume\n"
-            "- Multiple login attempts\n"
-            "- Unusual connection patterns\n\n"
-            "👉 Recommended Action: Monitor or block this activity."
-        )
+
+    # Define ranges
+    if score < 30:
+        status = "✅ Normal Traffic"
+        explanation = "Low activity and safe behavior detected."
+        risk_level = "Low"
+    elif score < 60:
+        status = "⚠️ Suspicious Activity"
+        explanation = "Moderate anomaly detected. Could indicate unusual behavior."
+        risk_level = "Medium"
     else:
-        return (
-            "✅ **Normal Traffic**\n\n"
-            f"Risk Score: {score:.2f}\n\n"
-            "The network activity appears safe and normal.\n"
-            "No immediate threat detected."
-        )
+        status = "🚨 Attack Detected!"
+        explanation = "High anomaly detected. Strong indication of malicious activity."
+        risk_level = "High"
+
+    return f"""
+{status}
+
+### 🔢 Risk Score: {score:.2f}
+The risk score represents the overall intensity of network activity based on input features.
+
+### 📊 Interpretation:
+- **0 – 30 → Normal Traffic (Low Risk)**
+- **30 – 60 → Suspicious Activity (Medium Risk)**
+- **60+ → Attack (High Risk)**
+
+### 🧠 Analysis:
+{explanation}
+
+### 🛡️ Recommendation:
+{"No action needed." if score < 30 else "Monitor the system." if score < 60 else "Immediate action required! Block or investigate."}
+"""
 
 
 # =========================