Update app.py

app.py

@@ -1,24 +1,94 @@
 import gradio as gr
 import datetime
 import pandas as pd
+import joblib
+from sklearn.cluster import HDBSCAN
+import numpy as np
+
+# --- 1. 載入模型與歷史資料 (實現動態 Rule 的關鍵) ---
+try:
+    le_action = joblib.load('le_action.pkl')
+    le_ip = joblib.load('le_ip.pkl')
+    
+    # 🌟 載入歷史資料作為 HDBSCAN 即時比對的基準
+    baseline_df = pd.read_csv('baseline_logs.csv')
+    baseline_df['hour'] = pd.to_datetime(baseline_df['timestamp']).dt.hour
+    
+    # 預先將歷史資料轉成特徵矩陣
+    baseline_X = np.column_stack((
+        baseline_df['hour'].values,
+        le_ip.transform(baseline_df['ip_address'].values),
+        le_action.transform(baseline_df['action'].values)
+    ))
+    
+    AI_READY = True
+    print("✅ AI 模組與歷史基準資料載入成功！")
+except Exception as e:
+    AI_READY = False
+    print(f"⚠️ AI 模組載入失敗，請確認 .pkl 與 .csv 檔案是否已上傳。錯誤: {e}")
 
-# --- 模擬資料庫 ---
-# 格式： "帳號": ["密碼", "角色名稱", "顯示姓名"]
 USER_DB = {
-    "student": ["1234", "學生", "林宸平"], 
-    "teacher": ["1234", "老師", "王教授"],
+    "student": ["1234", "學生", "同學"], 
+    "teacher": ["1234", "老師", "教授"],
     "admin": ["1234", "行政", "行政人員"],
-    "ta": ["1234", "TA", "系統助教"],
+    "ta": ["1234", "TA", "助教"],
     "sysadmin": ["1234", "系統管理員", "管理員"]
 }
 
-# 全域變數來儲存 Log
 log_history = []
 
-def record_log(ip, cookie, account, role, action, status):
-    """將行為記錄到模擬的資料庫中"""
+# --- 3. 核心邏輯與真實 HDBSCAN 異常偵測 ---
+def check_anomaly(ip, action, log_time):
+    if not AI_READY:
+        return "success" 
+        
+    if action in ["login_attempt", "logout"]:
+        return "success"
+
+    try:
+        # 1. 將新進來的行為轉為代碼
+        ip_code = le_ip.transform([ip])[0]
+        action_code = le_action.transform([action])[0]
+        
+        # 2. 擷取當下行為的時間 (Hour)
+        current_hour = pd.to_datetime(log_time).hour
+        
+        # 3. 組合這筆新資料的特徵向量
+        new_data_point = np.array([[current_hour, ip_code, action_code]])
+        
+        # 4. 🌟 將新資料與歷史資料合併 (這就是流程圖中的「即時丟入 AI 進行判斷」)
+        combined_X = np.vstack((baseline_X, new_data_point))
+        
+        # 5. 執行 HDBSCAN 分群
+        model = HDBSCAN(min_cluster_size=5, min_samples=3)
+        clusters = model.fit_predict(combined_X)
+        
+        # 6. 檢查最後一筆 (也就是剛剛送進來的新動作) 是否被分類為 -1 (雜訊/異常)
+        if clusters[-1] == -1:
+            return "⚠️異常_作息或行為不符"
+        else:
+            return "success"
+            
+    except ValueError:
+        # 如果遇到沒看過的 IP 或動作，連算都不用算，絕對是異常
+        return "⚠️異常_未知特徵"
+
+def record_log(ip, cookie, account, role, action, status, time_mode, custom_time):
+    # 決定紀錄的時間
+    if time_mode == "自訂時間 (模擬過去/未來)" and custom_time.strip() != "":
+        log_time = custom_time
+    else:
+        tw_tz = datetime.timezone(datetime.timedelta(hours=8))
+        log_time = datetime.datetime.now(tw_tz).strftime("%Y-%m-%d %H:%M:%S")
+
+    # 執行 AI 檢查 (現在把 log_time 也傳進去了)
+    if status == "success":
+        ai_judgment = check_anomaly(ip, action, log_time)
+        if ai_judgment != "success":
+            status = ai_judgment
+
     new_log = {
-        "timestamp": datetime.datetime.now().strftime("%Y-%m-%d %H:%M:%S"),
+        "timestamp": log_time,
         "ip_address": ip,
         "cookie_id": cookie,
         "account": account,
@@ -26,168 +96,88 @@ def record_log(ip, cookie, account, role, action, status):
         "action": action,
         "status": status
     }
-    log_history.append(new_log)
-    # 返回最新的 DataFrame 更新畫面
+    log_history.insert(0, new_log)
     return pd.DataFrame(log_history)
 
-def process_login(ip, cookie, account, password, captcha):
-    """處理登入邏輯並記錄 Log"""
-    # 預設驗證碼
+def process_login(ip, cookie, account, password, captcha, time_mode, custom_time):
     valid_captcha = "FEIK"
-    
-    # 檢查帳號是否存在
-    if account not in USER_DB:
-        df = record_log(ip, cookie, account, "Unknown", "login_attempt", "failed_no_account")
-        return gr.update(visible=True), gr.update(visible=False), "帳號不存在！", gr.update(), df
-        
-    role = USER_DB[account][1]
-    name = USER_DB[account][2]
-    
-    # 檢查驗證碼
-    if captcha.upper() != valid_captcha:
-        df = record_log(ip, cookie, account, role, "login_attempt", "failed_captcha")
-        return gr.update(visible=True), gr.update(visible=False), "驗證碼錯誤！", gr.update(), df
-        
-    # 檢查密碼
+    if account not in USER_DB: return gr.update(visible=True), gr.update(visible=False), "帳號不存在！", gr.update(), record_log(ip, cookie, account, "Unknown", "login_attempt", "failed_no_account", time_mode, custom_time)
+    role, name = USER_DB[account][1], USER_DB[account][2]
+    if captcha.upper() != valid_captcha: return gr.update(visible=True), gr.update(visible=False), "驗證碼錯誤！", gr.update(), record_log(ip, cookie, account, role, "login_attempt", "failed_captcha", time_mode, custom_time)
     if USER_DB[account][0] == password:
         welcome_msg = f"**{name}** 歡迎您  |  線上人數: 938"
-        df = record_log(ip, cookie, account, role, "login_attempt", "success")
-        # 登入成功：隱藏登入區塊，顯示系統區塊
+        df = record_log(ip, cookie, account, role, "login_attempt", "success", time_mode, custom_time)
         return gr.update(visible=False), gr.update(visible=True), "", welcome_msg, df
-    else:
-        df = record_log(ip, cookie, account, role, "login_attempt", "failed_password")
-        return gr.update(visible=True), gr.update(visible=False), "密碼錯誤！", gr.update(), df
+    return gr.update(visible=True), gr.update(visible=False), "密碼錯誤！", gr.update(), record_log(ip, cookie, account, role, "login_attempt", "failed_password", time_mode, custom_time)
 
-def simulate_click(ip, cookie, account, button_name):
-    """模擬登入後點擊系統選單的行為"""
+def simulate_click(ip, cookie, account, button_name, time_mode, custom_time):
     role = USER_DB.get(account, ["", "Unknown"])[1]
-    action_name = f"click_{button_name}"
-    df = record_log(ip, cookie, account, role, action_name, "success")
-    return df
+    return record_log(ip, cookie, account, role, button_name, "success", time_mode, custom_time)
 
-def logout(ip, cookie, account):
-    """處理登出並記錄"""
+def logout(ip, cookie, account, time_mode, custom_time):
     role = USER_DB.get(account, ["", "Unknown"])[1]
-    df = record_log(ip, cookie, account, role, "logout", "success")
-    # 登出後清空輸入框
+    df = record_log(ip, cookie, account, role, "logout", "success", time_mode, custom_time)
     return gr.update(visible=True), gr.update(visible=False), "", "", "", "", df
 
-# --- UI 介面設計 ---
+def toggle_time_input(mode):
+    return gr.update(visible=(mode == "自訂時間 (模擬過去/未來)"))
+
+# --- 4. UI 介面設計 ---
 custom_css = """
-.mock-panel { background-color: #f0f4f8; padding: 15px; border-radius: 8px; border: 1px dashed #7b9bb3; }
+.mock-panel { background-color: var(--background-fill-secondary); padding: 15px; border-radius: 8px; border: 1px dashed var(--border-color-primary); }
 .login-container { max-width: 500px; margin: 0 auto; padding: 20px; }
-.placeholder-box { background-color: #e9ecef; border: 2px dashed #ced4da; text-align: center; color: black; padding: 40px 0; margin-bottom: 15px; border-radius: 5px; }
+.placeholder-box { background-color: var(--background-fill-secondary); border: 2px dashed var(--border-color-primary); text-align: center; color: var(--body-text-color); padding: 40px 0; margin-bottom: 15px; border-radius: 5px; }
 .ntut-title { color: #d9534f; font-size: 22px; font-weight: bold; text-align: center; margin-bottom: 20px;}
 """
 
-with gr.Blocks(title="模擬校園入口與Log收集系統", css=custom_css) as demo:
-    
+with gr.Blocks(title="模擬校園入口與資安防護系統", css=custom_css) as demo:
     with gr.Row():
-        # ==========================================
-        # 左側：後端 Log 與環境模擬區
-        # ==========================================
         with gr.Column(scale=1, elem_classes="mock-panel"):
-            gr.Markdown("<h3 style='color: black;'>⚙️ 環境變數模擬器 (負責控制右側使用者的連線狀態)</h3>")
-            
-            mock_ip = gr.Dropdown(
-                label="模擬來源 IP", 
-                choices=["140.124.71.55 (校內)", "140.124.18.22 (宿舍)", "211.75.2.11 (校外ISP)", "45.33.22.11 (國外異常IP)"], 
-                value="140.124.71.55 (校內)",
-                allow_custom_value=True
-            )
-            mock_cookie = gr.Textbox(
-                label="模擬 Cookie Session ID", 
-                value="sess_a1b2c3d4e5",
-                placeholder="手動輸入或使用預設值"
-            )
-            
+            gr.Markdown("### ⚙️ 環境變數模擬器")
+            mock_ip = gr.Dropdown(choices=["140.124.71.55 (校內預設)", "140.124.18.22 (宿舍)", "45.33.22.11 (國外異常IP)"], value="140.124.71.55 (校內預設)", allow_custom_value=True, label="模擬來源 IP")
+            mock_cookie = gr.Textbox(label="模擬 Cookie Session ID", value="sess_baseline")
+            gr.Markdown("---")
+            time_mode = gr.Radio(label="時間設定模式", choices=["真實時間 (目前時間)", "自訂時間 (模擬過去/未來)"], value="真實時間 (目前時間)")
+            custom_time_input = gr.Textbox(label="輸入自訂時間", placeholder="格式: YYYY-MM-DD HH:MM:SS", value="2026-03-17 03:00:00", visible=False)
             gr.Markdown("---")
-            gr.Markdown("<h3 style='color: black;'>📊 即時 Log 收集區</h3>")
-            log_display = gr.Dataframe(
-                headers=["timestamp", "ip_address", "cookie_id", "account", "role", "action", "status"],
-                datatype=["str", "str", "str", "str", "str", "str", "str"],
-                interactive=False,
-                wrap=True
-            )
-
-        # ==========================================
-        # 右側：正常使用者介面
-        # ==========================================
+            gr.Markdown("### 📊 即時 Log 與 AI 判定區")
+            log_display = gr.Dataframe(headers=["timestamp", "ip_address", "cookie_id", "account", "role", "action", "status"], datatype=["str", "str", "str", "str", "str", "str", "str"], interactive=False, wrap=True)
+
         with gr.Column(scale=2):
-            
-            # --- 狀態 1: 登入畫面 ---
             with gr.Column(visible=True, elem_classes="login-container") as login_view:
                 gr.HTML("<div class='placeholder-box'>預留位置：台北科大 Logo 與 e化校園圖片</div>")
-                
                 gr.Markdown("<div class='ntut-title'>校園入口網站 Taipei Tech Portal</div>")
                 login_msg = gr.Markdown(value="", visible=True)
-                
-                with gr.Row():
-                    acc_input = gr.Textbox(label="使用者帳號 (Account)", placeholder="例如: student, admin...")
-                with gr.Row():
-                    pwd_input = gr.Textbox(label="使用者密碼 (Password)", type="password", placeholder="密碼皆為 1234")
-                
-                with gr.Row():
-                    gr.HTML("<div style='background:#fdfd96; padding:10px; font-weight:bold; letter-spacing: 3px; border:1px solid #ccc; text-align:center; color: black;'>F E I K</div>")
-                with gr.Row():
-                    captcha_input = gr.Textbox(label="請輸入驗證碼 (Keyin Code)")
-                    
+                with gr.Row(): acc_input = gr.Textbox(label="使用者帳號 (Account)", placeholder="例如: student, admin...")
+                with gr.Row(): pwd_input = gr.Textbox(label="使用者密碼 (Password)", type="password", placeholder="密碼皆為 1234")
+                with gr.Row(): gr.HTML("<div style='background:var(--background-fill-secondary); color:var(--body-text-color); padding:10px; font-weight:bold; letter-spacing: 3px; border:1px solid var(--border-color-primary); text-align:center;'>F E I K</div>")
+                with gr.Row(): captcha_input = gr.Textbox(label="請輸入驗證碼 (Keyin Code)")
                 login_btn = gr.Button("登入 Login", variant="primary")
-                gr.Markdown("*測試帳號：student (學生), teacher (老師), admin (行政), ta (助教), sysadmin (管理員)*")
 
-            # --- 狀態 2: 登入後儀表板 ---
             with gr.Column(visible=False) as dashboard_view:
-                gr.HTML("<div class='placeholder-box'>預留位置：學生學習歷程入口網站橫幅 (Banner)</div>")
-                
+                gr.HTML("<div class='placeholder-box'>預留位置：學生學習歷程入口網站橫幅</div>")
                 with gr.Row():
                     gr.Markdown("### 資訊系統")
                     welcome_text = gr.Markdown(value="", elem_classes="text-right")
                     logout_btn = gr.Button("登出", size="sm")
-
                 gr.Markdown("---")
-                
-                with gr.Accordion("▼ 教務系統", open=True):
-                    with gr.Row():
-                        btn_course_en = gr.Button("▶ 課程系統英文版", size="sm")
-                        btn_course = gr.Button("▶ 課程系統", size="sm")
-                        btn_select = gr.Button("▶ 新生網路選課系統", size="sm")
-                        
-                with gr.Accordion("▼ 學務系統", open=True):
-                    with gr.Row():
-                        btn_student_query = gr.Button("▶ 學生查詢專區", size="sm")
-                        btn_leave = gr.Button("▶ 學生請假系統", size="sm")
-                        
-                with gr.Accordion("▼ 總務系統", open=False):
-                    btn_payment = gr.Button("▶ 線上繳費系統", size="sm")
-
-    # --- 綁定事件 ---
-    
-    # 登入動作
-    login_btn.click(
-        fn=process_login,
-        inputs=[mock_ip, mock_cookie, acc_input, pwd_input, captcha_input],
-        outputs=[login_view, dashboard_view, login_msg, welcome_text, log_display]
-    )
-    
-    # 登出動作
-    logout_btn.click(
-        fn=logout,
-        inputs=[mock_ip, mock_cookie, acc_input],
-        outputs=[login_view, dashboard_view, acc_input, pwd_input, captcha_input, login_msg, log_display]
-    )
-
-    # 綁定選單點擊動作到 Log 系統
-    # 使用迴圈與 default argument (n=name) 確保 lambda 綁定正確的值
-    for btn, name in [
-        (btn_course_en, "course_en"), (btn_course, "course_system"), 
-        (btn_select, "course_selection"), (btn_student_query, "student_query"), 
-        (btn_leave, "leave_system"), (btn_payment, "payment_system")
-    ]:
-        btn.click(
-            fn=lambda ip, c, acc, n=name: simulate_click(ip, c, acc, n),
-            inputs=[mock_ip, mock_cookie, acc_input],
-            outputs=[log_display]
-        )
+                with gr.Accordion("▼ 1. 教務系統", open=True):
+                    with gr.Row(): btn_eval = gr.Button("▶ 期末網路教學評量", size="sm"); btn_pre_select = gr.Button("▶ 期末網路預選系統", size="sm"); btn_add_drop = gr.Button("▶ 開學後加退選系統", size="sm")
+                    with gr.Row(): btn_istudy = gr.Button("▶ 北科i學園PLUS", size="sm"); btn_card = gr.Button("▶ 學生證掛失及補發系統", size="sm"); btn_course = gr.Button("▶ 課程系統", size="sm")
+                    with gr.Row(): btn_score = gr.Button("▶ 學業成績查詢系統", size="sm")
+                with gr.Accordion("▼ 2. 學務系統", open=True):
+                    with gr.Row(): btn_leave = gr.Button("▶ 學生請假系統", size="sm"); btn_dorm = gr.Button("▶ 學生宿舍登錄(抽籤)系統", size="sm"); btn_scholarship = gr.Button("▶ 獎助學金申請系統", size="sm")
+                with gr.Accordion("▼ 3. 資訊服務", open=True):
+                    with gr.Row(): btn_webmail = gr.Button("▶ 網路郵局 WebMail", size="sm"); btn_vdesk = gr.Button("▶ 北科軟體雲", size="sm")
+                with gr.Accordion("▼ 惡意操作測試區", open=True):
+                    btn_hack_score = gr.Button("💀 嘗試偷改成績 (SQL Injection)", variant="stop", size="sm")
+
+    time_mode.change(fn=toggle_time_input, inputs=time_mode, outputs=custom_time_input)
+    login_btn.click(fn=process_login, inputs=[mock_ip, mock_cookie, acc_input, pwd_input, captcha_input, time_mode, custom_time_input], outputs=[login_view, dashboard_view, login_msg, welcome_text, log_display])
+    logout_btn.click(fn=logout, inputs=[mock_ip, mock_cookie, acc_input, time_mode, custom_time_input], outputs=[login_view, dashboard_view, acc_input, pwd_input, captcha_input, login_msg, log_display])
+
+    for btn, action_name in [(btn_eval, "click_eval_system"), (btn_pre_select, "click_pre_select_system"), (btn_add_drop, "click_add_drop_system"), (btn_istudy, "click_istudy"), (btn_card, "click_card_loss"), (btn_course, "click_course_system"), (btn_score, "click_score_query"), (btn_leave, "click_leave_system"), (btn_dorm, "click_dorm_system"), (btn_scholarship, "click_scholarship"), (btn_webmail, "click_webmail"), (btn_vdesk, "click_vdesk"), (btn_hack_score, "malicious_sql_injection")]:
+        btn.click(fn=lambda ip, c, acc, t_mode, t_custom, n=action_name: simulate_click(ip, c, acc, n, t_mode, t_custom), inputs=[mock_ip, mock_cookie, acc_input, time_mode, custom_time_input], outputs=[log_display])
 
 if __name__ == "__main__":
     demo.launch()