Interactive demo · defensive security
A network is a flow system: most traffic runs through a few trunk links. This tool maps those paths, simulates thousands of attacks against them, and shows which single link to cut to stop an intrusion with the least disruption. Block a link below and watch the attack success rate change.
Example Azure network · demo data, not a live systemTopology and traffic (from Azure flow logs) reveal trunks and branches. The busiest route to a key asset is the one to defend first.
Thousands of Monte Carlo attackers start at the internet and try to reach the database, preferring busy links and adapting when a route is cut.
Block the link that cuts the most attack paths for the least legitimate traffic. Branch blocks fire automatically; trunk cuts wait for an analyst.
| Link | Traffic share | Role |
|---|
Blocking a trunk stops most attacks but costs legitimate traffic — the simulation shows that trade-off. Blocking a branch is cheap but moves the attacker rather than stopping it.
Demonstration using sample data. In production, the topology comes from Azure Resource Graph and the traffic from Azure VNet flow logs, and blocks are enforced through network security groups, Azure Firewall and WAF rules.