HackShield (SIH Final)
HackShield (SIH Final)
PS ID:1364
Problem Statement Title : Fake Social Media Profile Detection and Reporting
Testing and
Evaluation
Inference
Roadmap
• Python
• Pandas
• Numpy
• TensorFlow or PyTorch
• Scikit-Learn
• Matplotlib and Seaborn
• Jupyter Notebook
• CSV file Handling
• Text editor or IDE
• Conda or Virtual Environments
• Data Processing Tools
DataSet Used:
The ML model was meticulously trained using a carefully curated dataset of
Instagram profiles randomly selected from four distinct countries, ensuring
diversity and inclusivity. The dataset also thoughtfully encompassed a wide
range of fake profiles for comprehensive coverage. In its initial phase, over
900 sample profiles were meticulously extracted and utilized for model
training.
Moreover, our website boasts a convenient login page that keeps track of
users' past predictions and activities. This feature ensures a seamless
working environment for users, allowing them to access their previous
interactions with the model effortlessly. It provides a valuable reference point
for users and enhances their overall experience by streamlining their
workflow. Whether you're a casual user or a frequent visitor, our website is
designed to cater to your needs efficiently and effectively.
Websites Login Page:
Websites Work Envoirment
Security Threats:
SQL Injection:
● Threat: Attackers inject malicious SQL code into input fields,
exploiting vulnerabilities to access or manipulate your database.
● Protection: Use parameterized queries and prepared statements to
validate and sanitize user inputs. Regularly update your website's
software and employ a Web Application Firewall (WAF) to block
malicious requests.
Cross-Site Scripting (XSS):
● Threat: Attackers inject malicious scripts into web pages viewed by
other users, potentially stealing user data or hijacking sessions.
● Protection: Input validation and output encoding are crucial.
Implement Content Security Policy (CSP) headers to restrict script
execution. Use security libraries and frameworks that offer XSS
protection.
Brute Force Attacks:
● Threat: Attackers try to gain unauthorized access to your website by
repeatedly trying different username/password combinations.
● Protection: Enforce strong password policies, implement account
lockout mechanisms, and use CAPTCHA or reCAPTCHA to protect
against automated login attempts. Consider implementing
multi-factor authentication (MFA) for added security