Cyber Monitor: A Lightweight Real-Time Framework for Integrated System and Network Security Monitoring

The increasing complexity of cybersecurity threats demands monitoring solutions that are both lightweight and comprehensive.This paper presents Cyber Monitor, a desktopbased real-time security monitoring framework developed in Python, designed specifically for small-scale environments and educational use.Unlike heavyweight enterprise solutions such as Splunk or complex frameworks like Metasploit, Cyber Monitor integrates system log analysis, process monitoring, file system activity tracking, and network connection monitoring into a single unified interface with minimal system overhead.This research makes five contributions: (1) a novel integrated monitoring architecture that combines system-level and networklevel visibility in a single lightweight tool; (2) a demand-driven monitoring strategy that reduces resource consumption compared to continuous polling, demonstrated empirically; (3) a rule-based severity scoring engine for real-time threat classification; (4) a qualitative comparative evaluation against five existing tools across seven dimensions; and ( 5) an opensource release enabling reproducibility and community extension.Performance evaluation demonstrates under 7% CPU utilisation and sub-second response times.Comparative evaluation against existing tools including Wireshark, Snort, Nagios, Metasploit and OSSEC demonstrates that Cyber Monitor fills a gap in accessible, low-overhead monitoring for nonenterprise environments.Experimental results confirm that the framework provides effective real-time monitoring capability while introducing minimal performance overhead, making it suitable for educational environments, individual system administrators, and resource-constrained deployments.