security

package
v1.0.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Aug 8, 2025 License: MIT Imports: 13 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AccessPattern

type AccessPattern struct {
	PatternID       string   `json:"pattern_id"`
	PatternType     string   `json:"pattern_type"`
	Files           []string `json:"files"`
	AccessFrequency int      `json:"access_frequency"`
	AccessTiming    string   `json:"access_timing"`
	Users           []string `json:"users"`
	Processes       []string `json:"processes"`
	Anomalous       bool     `json:"anomalous"`
}

AccessPattern represents access patterns

type ActivationPredictor

type ActivationPredictor struct {
	// contains filtered or unexported fields
}

ActivationPredictor predicts potential activation triggers

func NewActivationPredictor

func NewActivationPredictor() *ActivationPredictor

type ActiveDefense

type ActiveDefense struct {
	DefenseType   string        `json:"defense_type"`
	Status        string        `json:"status"`
	Effectiveness float64       `json:"effectiveness"`
	Coverage      []string      `json:"coverage"`
	LastActivated time.Time     `json:"last_activated"`
	ResponseTime  time.Duration `json:"response_time"`
}

ActiveDefense represents active defense mechanisms

type ActiveResponse

type ActiveResponse struct {
	ResponseID    string        `json:"response_id"`
	ResponseType  string        `json:"response_type"`
	Status        string        `json:"status"`
	TriggerEvent  string        `json:"trigger_event"`
	Actions       []string      `json:"actions"`
	Effectiveness float64       `json:"effectiveness"`
	StartTime     time.Time     `json:"start_time"`
	Duration      time.Duration `json:"duration"`
}

ActiveResponse represents active response mechanisms

type AdversarialAttackVector

type AdversarialAttackVector struct {
	AttackType      string    `json:"attack_type"`
	Severity        string    `json:"severity"`
	Description     string    `json:"description"`
	SuccessRate     float64   `json:"success_rate"`
	DetectionMethod string    `json:"detection_method"`
	Timestamp       time.Time `json:"timestamp"`
}

AdversarialAttackVector represents specific adversarial attack vectors

type AdversarialDetector

type AdversarialDetector struct {
	// contains filtered or unexported fields
}

func NewAdversarialDetector

func NewAdversarialDetector() *AdversarialDetector

type AdversarialRisk

type AdversarialRisk struct {
	RiskLevel              string                    `json:"risk_level"`
	ConfidenceScore        float64                   `json:"confidence_score"`
	DetectedAttackVectors  []AdversarialAttackVector `json:"detected_attack_vectors"`
	PerturbationMagnitude  float64                   `json:"perturbation_magnitude"`
	EvasionProbability     float64                   `json:"evasion_probability"`
	DefenseRecommendations []string                  `json:"defense_recommendations"`
}

AdversarialRisk represents adversarial attack risk assessment

type AlertManager

type AlertManager struct {
	// contains filtered or unexported fields
}

AlertManager manages security alerts

type AlertMetric

type AlertMetric struct {
	MetricID            string        `json:"metric_id"`
	AlertType           string        `json:"alert_type"`
	AlertCount          int           `json:"alert_count"`
	AcknowledgedCount   int           `json:"acknowledged_count"`
	ResolvedCount       int           `json:"resolved_count"`
	AverageResponseTime time.Duration `json:"average_response_time"`
}

AlertMetric represents alert metrics

type AlertRecord

type AlertRecord struct {
	RecordID  string    `json:"record_id"`
	AlertID   string    `json:"alert_id"`
	Action    string    `json:"action"`
	Timestamp time.Time `json:"timestamp"`
	User      string    `json:"user"`
	Notes     string    `json:"notes"`
}

AlertRecord represents alert history records

type AlertRule

type AlertRule struct {
	RuleID           string                 `json:"rule_id"`
	RuleName         string                 `json:"rule_name"`
	TriggerCondition string                 `json:"trigger_condition"`
	Severity         string                 `json:"severity"`
	AlertTemplate    string                 `json:"alert_template"`
	Parameters       map[string]interface{} `json:"parameters"`
	Enabled          bool                   `json:"enabled"`
}

AlertRule defines alert generation rules

type AnalyticsRule

type AnalyticsRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type AnomalousInput

type AnomalousInput struct {
	InputType       string  `json:"input_type"`
	AnomalyScore    float64 `json:"anomaly_score"`
	Description     string  `json:"description"`
	SuspiciousValue string  `json:"suspicious_value"`
	ExpectedRange   string  `json:"expected_range"`
}

AnomalousInput represents anomalous input detection

type AnomalyDetectionResult

type AnomalyDetectionResult struct {
	DetectedAnomalies    []BehavioralAnomaly  `json:"detected_anomalies"`
	AnomalyScore         float64              `json:"anomaly_score"`
	AnomalyTypes         []AnomalyType        `json:"anomaly_types"`
	StatisticalAnomalies []StatisticalAnomaly `json:"statistical_anomalies"`
	ContextualAnomalies  []ContextualAnomaly  `json:"contextual_anomalies"`
	CollectiveAnomalies  []CollectiveAnomaly  `json:"collective_anomalies"`
}

AnomalyDetectionResult represents anomaly detection results

type AnomalyDetector

type AnomalyDetector struct {
	// contains filtered or unexported fields
}

type AnomalyModel

type AnomalyModel struct {
	ModelID      string
	ModelType    string
	TrainingData []TrainingDataPoint
	Accuracy     float64
	LastTrained  time.Time
}

type AnomalyType

type AnomalyType struct {
	TypeID       string  `json:"type_id"`
	TypeName     string  `json:"type_name"`
	Description  string  `json:"description"`
	Frequency    int     `json:"frequency"`
	AverageScore float64 `json:"average_score"`
	RiskLevel    string  `json:"risk_level"`
}

AnomalyType represents anomaly types

type AstroturfDetector

type AstroturfDetector struct {
	// contains filtered or unexported fields
}

func NewAstroturfDetector

func NewAstroturfDetector() *AstroturfDetector

type AttackCampaign

type AttackCampaign struct {
	CampaignID      string     `json:"campaign_id"`
	CampaignName    string     `json:"campaign_name"`
	StartDate       time.Time  `json:"start_date"`
	EndDate         *time.Time `json:"end_date"`
	ThreatActor     string     `json:"threat_actor"`
	Objectives      []string   `json:"objectives"`
	Techniques      []string   `json:"techniques"`
	AffectedTargets []string   `json:"affected_targets"`
}

AttackCampaign represents identified attack campaigns

type AttackCorrelationResult

type AttackCorrelationResult struct {
	CorrelationScore      float64                `json:"correlation_score"`
	CorrelatedAttacks     []CorrelatedAttack     `json:"correlated_attacks"`
	AttackPatterns        []AttackPattern        `json:"attack_patterns"`
	TemporalCorrelations  []TemporalCorrelation  `json:"temporal_correlations"`
	SpatialCorrelations   []SpatialCorrelation   `json:"spatial_correlations"`
	TechnicalCorrelations []TechnicalCorrelation `json:"technical_correlations"`
}

AttackCorrelationResult represents attack correlation analysis

type AttackCorrelator

type AttackCorrelator struct {
	// contains filtered or unexported fields
}

func NewAttackCorrelator

func NewAttackCorrelator(correlationWindow time.Duration) *AttackCorrelator

type AttackPattern

type AttackPattern struct {
	PatternID    string    `json:"pattern_id"`
	PatternType  string    `json:"pattern_type"`
	Description  string    `json:"description"`
	Frequency    int       `json:"frequency"`
	Confidence   float64   `json:"confidence"`
	FirstSeen    time.Time `json:"first_seen"`
	LastSeen     time.Time `json:"last_seen"`
	ThreatActors []string  `json:"threat_actors"`
}

AttackPattern represents identified attack patterns

type AttackRecord

type AttackRecord struct {
	AttackID       string
	AttackType     string
	Timestamp      time.Time
	Indicators     []string
	TechnicalData  map[string]interface{}
	GeographicData map[string]interface{}
	Ecosystem      string
}

type AttackSignature

type AttackSignature struct {
	SignatureID string
	AttackType  string
	Patterns    []string
	Confidence  float64
	LastUpdated time.Time
}

type AttackStage

type AttackStage struct {
	StageNumber int        `json:"stage_number"`
	StageName   string     `json:"stage_name"`
	Status      string     `json:"status"`
	StartTime   *time.Time `json:"start_time"`
	EndTime     *time.Time `json:"end_time"`
	Objectives  []string   `json:"objectives"`
	Techniques  []string   `json:"techniques"`
	Success     bool       `json:"success"`
}

AttackStage represents individual attack stages

type AttackVector

type AttackVector struct {
	VectorID         string                 `json:"vector_id"`
	VectorType       string                 `json:"vector_type"`
	Severity         string                 `json:"severity"`
	Description      string                 `json:"description"`
	TechnicalDetails map[string]interface{} `json:"technical_details"`
	Indicators       []string               `json:"indicators"`
	DetectionTime    time.Time              `json:"detection_time"`
}

AttackVector represents attack vectors

type Attribution

type Attribution struct {
	ThreatActor string   `json:"threat_actor"`
	Confidence  float64  `json:"confidence"`
	Evidence    []string `json:"evidence"`
}

Attribution represents threat attribution

type AttributionAnalysis

type AttributionAnalysis struct {
	PrimaryAttribution      string              `json:"primary_attribution"`
	AttributionConfidence   float64             `json:"attribution_confidence"`
	AlternativeAttributions []Attribution       `json:"alternative_attributions"`
	AttributionFactors      []AttributionFactor `json:"attribution_factors"`
}

AttributionAnalysis represents threat attribution analysis

type AttributionEngine

type AttributionEngine struct {
	// contains filtered or unexported fields
}

type AttributionFactor

type AttributionFactor struct {
	FactorType string  `json:"factor_type"`
	Weight     float64 `json:"weight"`
	Evidence   string  `json:"evidence"`
	Confidence float64 `json:"confidence"`
}

AttributionFactor represents attribution factors

type AttributionRule

type AttributionRule struct {
	RuleID      string
	Indicators  []string
	ThreatActor string
	Weight      float64
	Confidence  float64
}

type AuthenticationAnalytics

type AuthenticationAnalytics struct {
	// contains filtered or unexported fields
}

type AuthenticationAnalyticsRule

type AuthenticationAnalyticsRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type AuthenticationEvent

type AuthenticationEvent struct {
	EventID   string
	UserID    string
	EventType string
	Timestamp time.Time
	Result    string
	Details   map[string]interface{}
	Location  string
	Device    string
}

type AuthenticationFraud

type AuthenticationFraud struct {
	FraudID       string
	UserID        string
	FraudType     string
	DetectionTime time.Time
	Severity      string
	Evidence      []string
}

type AuthenticationFraudDetector

type AuthenticationFraudDetector struct {
	// contains filtered or unexported fields
}

type AuthenticationFraudPattern

type AuthenticationFraudPattern struct {
	PatternID  string
	FraudType  string
	Indicators []string
	RiskLevel  string
}

type AuthenticationMetric

type AuthenticationMetric struct {
	MetricID   string
	UserID     string
	MetricType string
	Value      float64
	Timestamp  time.Time
	Unit       string
}

type AuthenticationMonitor

type AuthenticationMonitor struct {
	// contains filtered or unexported fields
}

type AuthenticationRecord

type AuthenticationRecord struct {
	RecordID  string
	UserID    string
	Timestamp time.Time
	Events    []AuthenticationEvent
	Summary   string
	RiskScore float64
}

type AuthenticationReport

type AuthenticationReport struct {
	ReportID       string
	UserID         string
	GenerationTime time.Time
	Content        string
	Format         string
	Metadata       map[string]interface{}
}

type AuthenticationReportGenerationRule

type AuthenticationReportGenerationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type AuthenticationReportGenerator

type AuthenticationReportGenerator struct {
	// contains filtered or unexported fields
}

type AuthenticationReportSection

type AuthenticationReportSection struct {
	SectionID   string
	SectionName string
	Content     string
	DataSources []string
}

type AuthenticationReportTemplate

type AuthenticationReportTemplate struct {
	TemplateID   string
	TemplateName string
	Format       string
	Sections     []AuthenticationReportSection
	Parameters   map[string]interface{}
}

type AuthenticationRule

type AuthenticationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type AuthenticationValidationRule

type AuthenticationValidationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type AuthorityInfo

type AuthorityInfo struct {
	Name        string
	Domain      string
	Verified    bool
	LastUpdated time.Time
}

type AuthorityValidator

type AuthorityValidator struct {
	// contains filtered or unexported fields
}

Authority validation structures

func NewAuthorityValidator

func NewAuthorityValidator() *AuthorityValidator

type AutomatedAction

type AutomatedAction struct {
	ActionID         string    `json:"action_id"`
	ActionType       string    `json:"action_type"`
	TriggerCondition string    `json:"trigger_condition"`
	ExecutionTime    time.Time `json:"execution_time"`
	Result           string    `json:"result"`
	Effectiveness    float64   `json:"effectiveness"`
}

AutomatedAction represents automated actions

type AutomationEngine

type AutomationEngine struct {
	// contains filtered or unexported fields
}

type AutomationRule

type AutomationRule struct {
	RuleID           string
	TriggerCondition string
	Actions          []string
	Priority         int
	Enabled          bool
}

type AutomationTask

type AutomationTask struct {
	TaskID        string
	TaskType      string
	Parameters    map[string]interface{}
	ScheduledTime time.Time
	Status        string
}

type Baseline

type Baseline struct {
	BaselineID   string
	BaselineType string
	CreationTime time.Time
	LastUpdated  time.Time
	Data         map[string]interface{}
	Metrics      map[string]float64
	Status       string
}

type BaselineComparisonEngine

type BaselineComparisonEngine struct {
	// contains filtered or unexported fields
}

type BaselineComparisonResult

type BaselineComparisonResult struct {
	BaselineVersion  string              `json:"baseline_version"`
	ComparisonScore  float64             `json:"comparison_score"`
	Deviations       []BaselineDeviation `json:"deviations"`
	NewBehaviors     []NewBehavior       `json:"new_behaviors"`
	ChangedBehaviors []ChangedBehavior   `json:"changed_behaviors"`
	RemovedBehaviors []RemovedBehavior   `json:"removed_behaviors"`
	BaselineHealth   *BaselineHealth     `json:"baseline_health"`
}

BaselineComparisonResult represents baseline comparison results

type BaselineDeviation

type BaselineDeviation struct {
	DeviationID   string    `json:"deviation_id"`
	DeviationType string    `json:"deviation_type"`
	Metric        string    `json:"metric"`
	BaselineValue float64   `json:"baseline_value"`
	CurrentValue  float64   `json:"current_value"`
	Deviation     float64   `json:"deviation"`
	Significance  float64   `json:"significance"`
	DetectionTime time.Time `json:"detection_time"`
}

BaselineDeviation represents baseline deviations

type BaselineHealth

type BaselineHealth struct {
	HealthScore     float64       `json:"health_score"`
	LastUpdate      time.Time     `json:"last_update"`
	Staleness       time.Duration `json:"staleness"`
	Completeness    float64       `json:"completeness"`
	Accuracy        float64       `json:"accuracy"`
	Recommendations []string      `json:"recommendations"`
}

BaselineHealth represents baseline health

type BaselineManagementRule

type BaselineManagementRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type BaselineManager

type BaselineManager struct {
	// contains filtered or unexported fields
}

type BaselineRule

type BaselineRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type BaselineUpdateScheduler

type BaselineUpdateScheduler struct {
	// contains filtered or unexported fields
}

type BehaviorBaseline

type BehaviorBaseline struct {
	// contains filtered or unexported fields
}

BehaviorBaseline tracks normal behavior patterns

func NewBehaviorBaseline

func NewBehaviorBaseline() *BehaviorBaseline

type BehavioralAnalysisResult

type BehavioralAnalysisResult struct {
	PackageName             string                         `json:"package_name"`
	OverallBehavioralScore  float64                        `json:"overall_behavioral_score"`
	PatternDetection        *PatternDetectionResult        `json:"pattern_detection"`
	AnomalyDetection        *AnomalyDetectionResult        `json:"anomaly_detection"`
	InstallationAnalysis    *InstallationAnalysisResult    `json:"installation_analysis"`
	RuntimeAnalysis         *RuntimeAnalysisResult         `json:"runtime_analysis"`
	NetworkAnalysis         *NetworkAnalysisResult         `json:"network_analysis"`
	FileSystemAnalysis      *FileSystemAnalysisResult      `json:"filesystem_analysis"`
	ProcessAnalysis         *ProcessAnalysisResult         `json:"process_analysis"`
	UserInteractionAnalysis *UserInteractionAnalysisResult `json:"user_interaction_analysis"`
	TemporalAnalysis        *TemporalAnalysisResult        `json:"temporal_analysis"`
	BaselineComparison      *BaselineComparisonResult      `json:"baseline_comparison"`
	DetectedBehaviors       []DetectedBehavior             `json:"detected_behaviors"`
	BehavioralAnomalies     []BehavioralAnomaly            `json:"behavioral_anomalies"`
	RiskAssessment          *BehavioralRiskAssessment      `json:"risk_assessment"`
	Recommendations         []BehavioralRecommendation     `json:"recommendations"`
	Metadata                map[string]interface{}         `json:"metadata"`
}

BehavioralAnalysisResult represents behavioral analysis results

type BehavioralAnalyzer

type BehavioralAnalyzer struct {
	// contains filtered or unexported fields
}

BehavioralAnalyzer provides comprehensive behavioral pattern analysis and anomaly detection Addresses critical vulnerabilities identified in adversarial assessment: - Behavioral pattern exploitation - Anomalous installation patterns - Runtime behavior analysis - Network communication patterns - File system access patterns - Process execution patterns - User interaction patterns - Temporal behavior analysis

func NewBehavioralAnalyzer

func NewBehavioralAnalyzer(config *BehavioralConfig, logger logger.Logger) *BehavioralAnalyzer

NewBehavioralAnalyzer creates a new behavioral analyzer

func (*BehavioralAnalyzer) AnalyzeBehavior

func (ba *BehavioralAnalyzer) AnalyzeBehavior(ctx context.Context, pkg *types.Package) (*BehavioralAnalysisResult, error)

AnalyzeBehavior performs comprehensive behavioral analysis

type BehavioralAnomaly

type BehavioralAnomaly struct {
	AnomalyID     string                 `json:"anomaly_id"`
	AnomalyType   string                 `json:"anomaly_type"`
	Severity      string                 `json:"severity"`
	Description   string                 `json:"description"`
	DetectionTime time.Time              `json:"detection_time"`
	AnomalyScore  float64                `json:"anomaly_score"`
	Context       map[string]interface{} `json:"context"`
	Evidence      []string               `json:"evidence"`
	Impact        string                 `json:"impact"`
}

BehavioralAnomaly represents behavioral anomalies

type BehavioralConfig

type BehavioralConfig struct {
	EnablePatternDetection        bool          `yaml:"enable_pattern_detection"`         // true
	EnableAnomalyDetection        bool          `yaml:"enable_anomaly_detection"`         // true
	EnableInstallationAnalysis    bool          `yaml:"enable_installation_analysis"`     // true
	EnableRuntimeAnalysis         bool          `yaml:"enable_runtime_analysis"`          // true
	EnableNetworkAnalysis         bool          `yaml:"enable_network_analysis"`          // true
	EnableFileSystemAnalysis      bool          `yaml:"enable_filesystem_analysis"`       // true
	EnableProcessAnalysis         bool          `yaml:"enable_process_analysis"`          // true
	EnableUserInteractionAnalysis bool          `yaml:"enable_user_interaction_analysis"` // true
	EnableTemporalAnalysis        bool          `yaml:"enable_temporal_analysis"`         // true
	EnableBaselineManagement      bool          `yaml:"enable_baseline_management"`       // true
	AnomalyThreshold              float64       `yaml:"anomaly_threshold"`                // 0.7
	PatternConfidenceThreshold    float64       `yaml:"pattern_confidence_threshold"`     // 0.8
	BaselineUpdateInterval        time.Duration `yaml:"baseline_update_interval"`         // 24h
	AnalysisWindow                time.Duration `yaml:"analysis_window"`                  // 7d
	MaxConcurrentAnalysis         int           `yaml:"max_concurrent_analysis"`          // 5
	Enabled                       bool          `yaml:"enabled"`                          // true
}

BehavioralConfig configures behavioral analysis parameters

type BehavioralPattern

type BehavioralPattern struct {
	PatternID     string                 `json:"pattern_id"`
	PatternType   string                 `json:"pattern_type"`
	Description   string                 `json:"description"`
	Frequency     int                    `json:"frequency"`
	Confidence    float64                `json:"confidence"`
	RiskLevel     string                 `json:"risk_level"`
	FirstObserved time.Time              `json:"first_observed"`
	LastObserved  time.Time              `json:"last_observed"`
	Indicators    []string               `json:"indicators"`
	Context       map[string]interface{} `json:"context"`
}

BehavioralPattern represents detected behavioral patterns

type BehavioralRecommendation

type BehavioralRecommendation struct {
	RecommendationID   string        `json:"recommendation_id"`
	RecommendationType string        `json:"recommendation_type"`
	Priority           string        `json:"priority"`
	Description        string        `json:"description"`
	Actions            []string      `json:"actions"`
	Timeline           time.Duration `json:"timeline"`
	Resources          []string      `json:"resources"`
	ExpectedOutcome    string        `json:"expected_outcome"`
	SuccessMetrics     []string      `json:"success_metrics"`
}

BehavioralRecommendation represents behavioral recommendations

type BehavioralRiskAssessment

type BehavioralRiskAssessment struct {
	OverallRiskLevel     string               `json:"overall_risk_level"`
	RiskScore            float64              `json:"risk_score"`
	RiskFactors          []RiskFactor         `json:"risk_factors"`
	RiskCategories       []RiskCategory       `json:"risk_categories"`
	RiskTrends           []RiskTrend          `json:"risk_trends"`
	MitigationStrategies []MitigationStrategy `json:"mitigation_strategies"`
}

BehavioralRiskAssessment represents behavioral risk assessment

type BotDetectionRule

type BotDetectionRule struct {
	Pattern     string
	Confidence  float64
	Description string
}

type CampaignDetectionResult

type CampaignDetectionResult struct {
	DetectedCampaigns []DetectedCampaign `json:"detected_campaigns"`
	CampaignPatterns  []CampaignPattern  `json:"campaign_patterns"`
	StagedAttacks     []StagedAttack     `json:"staged_attacks"`
	CampaignMetrics   *CampaignMetrics   `json:"campaign_metrics"`
}

CampaignDetectionResult represents campaign detection results

type CampaignDetector

type CampaignDetector struct {
	// contains filtered or unexported fields
}

func NewCampaignDetector

func NewCampaignDetector() *CampaignDetector

type CampaignMetrics

type CampaignMetrics struct {
	TotalCampaigns       int           `json:"total_campaigns"`
	ActiveCampaigns      int           `json:"active_campaigns"`
	CompletedCampaigns   int           `json:"completed_campaigns"`
	AverageDetectionTime time.Duration `json:"average_detection_time"`
	DetectionAccuracy    float64       `json:"detection_accuracy"`
}

CampaignMetrics represents campaign detection metrics

type CampaignPattern

type CampaignPattern struct {
	PatternID    string        `json:"pattern_id"`
	PatternName  string        `json:"pattern_name"`
	Stages       []string      `json:"stages"`
	Duration     time.Duration `json:"duration"`
	SuccessRate  float64       `json:"success_rate"`
	ThreatActors []string      `json:"threat_actors"`
}

CampaignPattern represents campaign patterns

type CampaignProgress

type CampaignProgress struct {
	CampaignID   string
	CurrentStage int
	Progression  float64
	StartTime    time.Time
	LastUpdate   time.Time
}

type CertificationBody

type CertificationBody struct {
	Name      string
	Authority string
	Verified  bool
	Standards []string
}

type ChangePoint

type ChangePoint struct {
	ChangePointID string    `json:"change_point_id"`
	Timestamp     time.Time `json:"timestamp"`
	ChangeType    string    `json:"change_type"`
	Magnitude     float64   `json:"magnitude"`
	Confidence    float64   `json:"confidence"`
	Description   string    `json:"description"`
}

ChangePoint represents change points

type ChangedBehavior

type ChangedBehavior struct {
	BehaviorID   string    `json:"behavior_id"`
	BehaviorType string    `json:"behavior_type"`
	ChangeType   string    `json:"change_type"`
	OldPattern   string    `json:"old_pattern"`
	NewPattern   string    `json:"new_pattern"`
	ChangeTime   time.Time `json:"change_time"`
	Impact       string    `json:"impact"`
}

ChangedBehavior represents changed behaviors

type ChecksumAnalysis

type ChecksumAnalysis struct {
	ChecksumAlgorithm  string             `json:"checksum_algorithm"`
	ChecksumMatches    []ChecksumMatch    `json:"checksum_matches"`
	ChecksumMismatches []ChecksumMismatch `json:"checksum_mismatches"`
	ChecksumAnomalies  []ChecksumAnomaly  `json:"checksum_anomalies"`
}

ChecksumAnalysis represents checksum analysis

type ChecksumAnomaly

type ChecksumAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	AffectedFiles []string  `json:"affected_files"`
	Evidence      []string  `json:"evidence"`
}

ChecksumAnomaly represents checksum anomalies

type ChecksumMatch

type ChecksumMatch struct {
	FilePath         string    `json:"file_path"`
	ExpectedChecksum string    `json:"expected_checksum"`
	ActualChecksum   string    `json:"actual_checksum"`
	Timestamp        time.Time `json:"timestamp"`
	Verified         bool      `json:"verified"`
}

ChecksumMatch represents checksum matches

type ChecksumMismatch

type ChecksumMismatch struct {
	FilePath         string    `json:"file_path"`
	ExpectedChecksum string    `json:"expected_checksum"`
	ActualChecksum   string    `json:"actual_checksum"`
	DetectionTime    time.Time `json:"detection_time"`
	Severity         string    `json:"severity"`
	PossibleCauses   []string  `json:"possible_causes"`
}

ChecksumMismatch represents checksum mismatches

type CircularDependency

type CircularDependency struct {
	Cycle       []string `json:"cycle"`
	Length      int      `json:"length"`
	Complexity  float64  `json:"complexity"`
	Exploitable bool     `json:"exploitable"`
}

CircularDependency represents a circular dependency

type CircularDependencyDetector

type CircularDependencyDetector struct {
	// contains filtered or unexported fields
}

CircularDependencyDetector detects circular dependencies

func NewCircularDependencyDetector

func NewCircularDependencyDetector(maxCycles int) *CircularDependencyDetector

func (*CircularDependencyDetector) FindCycles

func (cdd *CircularDependencyDetector) FindCycles(node string, graph *DependencyGraph) [][]string

func (*CircularDependencyDetector) Reset

func (cdd *CircularDependencyDetector) Reset()

type CodeChange

type CodeChange struct {
	Type       string // "addition", "modification", "deletion"
	Location   string
	Content    string
	Suspicion  float64
	Indicators []string
}

CodeChange represents changes between versions

type CollectiveAnomaly

type CollectiveAnomaly struct {
	AnomalyID        string        `json:"anomaly_id"`
	AffectedEntities []string      `json:"affected_entities"`
	CollectiveScore  float64       `json:"collective_score"`
	Pattern          string        `json:"pattern"`
	Duration         time.Duration `json:"duration"`
	Coordination     bool          `json:"coordination"`
}

CollectiveAnomaly represents collective anomalies

type CommunicationPattern

type CommunicationPattern struct {
	PatternID    string   `json:"pattern_id"`
	PatternType  string   `json:"pattern_type"`
	Frequency    int      `json:"frequency"`
	Destinations []string `json:"destinations"`
	Protocols    []string `json:"protocols"`
	DataVolume   int64    `json:"data_volume"`
	Periodicity  bool     `json:"periodicity"`
	Encrypted    bool     `json:"encrypted"`
	Anomalous    bool     `json:"anomalous"`
}

CommunicationPattern represents communication patterns

type CommunityMetrics

type CommunityMetrics struct {
	Stars          int
	Forks          int
	Contributors   int
	Issues         int
	PullRequests   int
	CommunityScore float64
	Authenticity   float64
}

type CommunityValidator

type CommunityValidator struct {
	// contains filtered or unexported fields
}

Community validation structures

func NewCommunityValidator

func NewCommunityValidator() *CommunityValidator

type ComparisonRecord

type ComparisonRecord struct {
	RecordID       string
	BaselineID     string
	ComparisonTime time.Time
	ComparisonType string
	Results        map[string]interface{}
	Deviations     []BaselineDeviation
}

type ComparisonRule

type ComparisonRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ComplexityAnalyzer

type ComplexityAnalyzer struct {
	// contains filtered or unexported fields
}

ComplexityAnalyzer detects and prevents computational complexity exploitation Addresses critical vulnerabilities identified in adversarial assessment: - Exponential dependency growth overwhelming analysis algorithms - Circular dependency mazes creating infinite analysis loops - Version constraint conflicts triggering NP-hard resolution problems - Transitive closure calculations scaling to O(V³) complexity

func NewComplexityAnalyzer

func NewComplexityAnalyzer(config *ComplexityAnalyzerConfig, logger logger.Logger) *ComplexityAnalyzer

NewComplexityAnalyzer creates a new complexity analyzer

func (*ComplexityAnalyzer) AnalyzeComplexity

func (ca *ComplexityAnalyzer) AnalyzeComplexity(ctx context.Context, pkg *types.Package) (*ComplexityThreat, error)

AnalyzeComplexity performs comprehensive complexity analysis

type ComplexityAnalyzerConfig

type ComplexityAnalyzerConfig struct {
	MaxDependencyDepth     int           `yaml:"max_dependency_depth"`     // 15 levels max
	MaxDependencyCount     int           `yaml:"max_dependency_count"`     // 1000 deps max
	MaxAnalysisTime        time.Duration `yaml:"max_analysis_time"`        // 30 seconds max
	MaxMemoryUsage         int64         `yaml:"max_memory_usage"`         // 512MB max
	CircularDetectionLimit int           `yaml:"circular_detection_limit"` // 100 cycles max
	ComplexityThreshold    float64       `yaml:"complexity_threshold"`     // 0.8
	EnableEarlyTermination bool          `yaml:"enable_early_termination"` // true
	EnableComplexityLimits bool          `yaml:"enable_complexity_limits"` // true
	Enabled                bool          `yaml:"enabled"`                  // true
}

ComplexityAnalyzerConfig configures complexity analysis parameters

func DefaultComplexityAnalyzerConfig

func DefaultComplexityAnalyzerConfig() *ComplexityAnalyzerConfig

DefaultComplexityAnalyzerConfig returns default configuration

type ComplexityLimiter

type ComplexityLimiter struct {
	// contains filtered or unexported fields
}

ComplexityLimiter enforces complexity limits during analysis

func NewComplexityLimiter

func NewComplexityLimiter(maxTime time.Duration, maxMemory int64) *ComplexityLimiter

func (*ComplexityLimiter) IncrementOperations

func (cl *ComplexityLimiter) IncrementOperations()

func (*ComplexityLimiter) ShouldTerminate

func (cl *ComplexityLimiter) ShouldTerminate() bool

func (*ComplexityLimiter) Start

func (cl *ComplexityLimiter) Start()

type ComplexityThreat

type ComplexityThreat struct {
	ThreatID             string                 `json:"threat_id"`
	PackageName          string                 `json:"package_name"`
	ThreatType           string                 `json:"threat_type"`
	Severity             types.Severity         `json:"severity"`
	ComplexityScore      float64                `json:"complexity_score"`
	DependencyDepth      int                    `json:"dependency_depth"`
	DependencyCount      int                    `json:"dependency_count"`
	CircularDependencies []CircularDependency   `json:"circular_dependencies"`
	PerformanceImpact    *PerformanceImpact     `json:"performance_impact"`
	ExploitationRisk     string                 `json:"exploitation_risk"`
	Recommendations      []string               `json:"recommendations"`
	Metadata             map[string]interface{} `json:"metadata"`
}

ComplexityThreat represents a detected complexity threat

type ComplianceStandard

type ComplianceStandard struct {
	Name         string
	Authority    string
	Requirements []string
	Verified     bool
}

type ComplianceValidator

type ComplianceValidator struct {
	// contains filtered or unexported fields
}

Compliance validation structures

func NewComplianceValidator

func NewComplianceValidator() *ComplianceValidator

type ComprehensiveSecurityResult

type ComprehensiveSecurityResult struct {
	PackageName             string                     `json:"package_name"`
	OverallThreatScore      float64                    `json:"overall_threat_score"`
	ThreatLevel             string                     `json:"threat_level"`
	TemporalAnalysis        *TemporalThreat            `json:"temporal_analysis"`
	ComplexityAnalysis      *ComplexityThreat          `json:"complexity_analysis"`
	TrustValidation         *TrustValidationResult     `json:"trust_validation"`
	MLHardening             *MLHardeningResult         `json:"ml_hardening"`
	MultiVectorAnalysis     *MultiVectorAnalysisResult `json:"multi_vector_analysis"`
	BehavioralAnalysis      *BehavioralAnalysisResult  `json:"behavioral_analysis"`
	ThreatIntelligence      *ThreatIntelResult         `json:"threat_intelligence"`
	SecurityMetrics         *SecurityMetricsResult     `json:"security_metrics"`
	DetectedThreats         []DetectedThreat           `json:"detected_threats"`
	SecurityRecommendations []SecurityRecommendation   `json:"security_recommendations"`
	ResponseActions         []ResponseAction           `json:"response_actions"`
	AlertsGenerated         []SecurityAlert            `json:"alerts_generated"`
	AnalysisTimestamp       time.Time                  `json:"analysis_timestamp"`
	AnalysisDuration        time.Duration              `json:"analysis_duration"`
	RequiresImmediateAction bool                       `json:"requires_immediate_action"`
	Metadata                map[string]interface{}     `json:"metadata"`
}

ComprehensiveSecurityResult represents comprehensive security analysis results

type ConnectionMonitor

type ConnectionMonitor struct {
	// contains filtered or unexported fields
}

type ConnectionRecord

type ConnectionRecord struct {
	ConnectionID   string
	Timestamp      time.Time
	Details        NetworkConnection
	Classification string
}

type ConnectionRule

type ConnectionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ContextualAnomaly

type ContextualAnomaly struct {
	AnomalyID        string                 `json:"anomaly_id"`
	Context          map[string]interface{} `json:"context"`
	ContextualScore  float64                `json:"contextual_score"`
	ExpectedBehavior string                 `json:"expected_behavior"`
	ObservedBehavior string                 `json:"observed_behavior"`
	ContextFactors   []string               `json:"context_factors"`
}

ContextualAnomaly represents contextual anomalies

type CoordinatedResponse

type CoordinatedResponse struct {
	ResponseID    string    `json:"response_id"`
	ResponseType  string    `json:"response_type"`
	TriggerEvent  string    `json:"trigger_event"`
	Actions       []string  `json:"actions"`
	Effectiveness float64   `json:"effectiveness"`
	ExecutionTime time.Time `json:"execution_time"`
}

CoordinatedResponse represents coordinated defense responses

type CoordinatedThreat

type CoordinatedThreat struct {
	ThreatID          string            `json:"threat_id"`
	ThreatType        string            `json:"threat_type"`
	CoordinationLevel string            `json:"coordination_level"`
	AttackVectors     []string          `json:"attack_vectors"`
	ThreatActors      []string          `json:"threat_actors"`
	Timeline          []ThreatEvent     `json:"timeline"`
	ImpactAssessment  *ImpactAssessment `json:"impact_assessment"`
}

CoordinatedThreat represents coordinated threats

type CoordinationRule

type CoordinationRule struct {
	RuleID           string
	TriggerCondition string
	DefenseSystems   []string
	Actions          []string
	Priority         int
}

type CorporateEntity

type CorporateEntity struct {
	Name       string
	Domain     string
	Verified   bool
	Employees  int
	Founded    time.Time
	Legitimacy float64
}

type CorporateValidator

type CorporateValidator struct {
	// contains filtered or unexported fields
}

Corporate validation structures

func NewCorporateValidator

func NewCorporateValidator() *CorporateValidator

type CorrelatedAttack

type CorrelatedAttack struct {
	AttackID            string    `json:"attack_id"`
	AttackType          string    `json:"attack_type"`
	TargetEcosystem     string    `json:"target_ecosystem"`
	Timestamp           time.Time `json:"timestamp"`
	CorrelationStrength float64   `json:"correlation_strength"`
	SharedIndicators    []string  `json:"shared_indicators"`
}

CorrelatedAttack represents correlated attack instances

type CorrelationRule

type CorrelationRule struct {
	RuleID     string
	Conditions []string
	Threshold  float64
	Action     string
}

type CredentialChecker

type CredentialChecker struct {
	// contains filtered or unexported fields
}

type CredentialStrengthAnalyzer

type CredentialStrengthAnalyzer struct {
	// contains filtered or unexported fields
}

type CredentialValidationRule

type CredentialValidationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type CredentialWeakness

type CredentialWeakness struct {
	WeaknessID   string
	WeaknessType string
	Description  string
	Severity     string
	Mitigation   string
}

type CrossEcosystemMonitor

type CrossEcosystemMonitor struct {
	// contains filtered or unexported fields
}

func NewCrossEcosystemMonitor

func NewCrossEcosystemMonitor() *CrossEcosystemMonitor

type CrossEcosystemResult

type CrossEcosystemResult struct {
	EcosystemsAnalyzed      []string                 `json:"ecosystems_analyzed"`
	CrossEcosystemThreats   []CrossEcosystemThreat   `json:"cross_ecosystem_threats"`
	EcosystemCorrelations   []EcosystemCorrelation   `json:"ecosystem_correlations"`
	SupplyChainRisks        []SupplyChainRisk        `json:"supply_chain_risks"`
	CrossPlatformIndicators []CrossPlatformIndicator `json:"cross_platform_indicators"`
}

CrossEcosystemResult represents cross-ecosystem analysis

type CrossEcosystemThreat

type CrossEcosystemThreat struct {
	ThreatID           string    `json:"threat_id"`
	ThreatType         string    `json:"threat_type"`
	AffectedEcosystems []string  `json:"affected_ecosystems"`
	CoordinationLevel  string    `json:"coordination_level"`
	ThreatSeverity     string    `json:"threat_severity"`
	FirstDetected      time.Time `json:"first_detected"`
	PropagationVector  string    `json:"propagation_vector"`
}

CrossEcosystemThreat represents cross-ecosystem threats

type CrossPackagePattern

type CrossPackagePattern struct {
	PatternID        string   `json:"pattern_id"`
	AffectedPackages []string `json:"affected_packages"`
	PatternType      string   `json:"pattern_type"`
	Correlation      float64  `json:"correlation"`
	RiskLevel        string   `json:"risk_level"`
}

CrossPackagePattern represents cross-package patterns

type CrossPlatformIndicator

type CrossPlatformIndicator struct {
	IndicatorType  string   `json:"indicator_type"`
	Platforms      []string `json:"platforms"`
	IndicatorValue string   `json:"indicator_value"`
	ThreatLevel    string   `json:"threat_level"`
	Confidence     float64  `json:"confidence"`
}

CrossPlatformIndicator represents cross-platform indicators

type CyclicalPattern

type CyclicalPattern struct {
	PatternID     string        `json:"pattern_id"`
	CycleType     string        `json:"cycle_type"`
	CycleDuration time.Duration `json:"cycle_duration"`
	Description   string        `json:"description"`
	Amplitude     float64       `json:"amplitude"`
	Phase         float64       `json:"phase"`
	Stability     float64       `json:"stability"`
}

CyclicalPattern represents cyclical patterns

type DNSAnalysis

type DNSAnalysis struct {
	DNSQueries        []DNSQuery         `json:"dns_queries"`
	SuspiciousDomains []SuspiciousDomain `json:"suspicious_domains"`
	DNSPatterns       []DNSPattern       `json:"dns_patterns"`
	DNSAnomalies      []DNSAnomaly       `json:"dns_anomalies"`
}

DNSAnalysis represents DNS analysis

type DNSAnalyzer

type DNSAnalyzer struct {
	// contains filtered or unexported fields
}

type DNSAnomaly

type DNSAnomaly struct {
	AnomalyID       string    `json:"anomaly_id"`
	AnomalyType     string    `json:"anomaly_type"`
	DetectionTime   time.Time `json:"detection_time"`
	Description     string    `json:"description"`
	AffectedDomains []string  `json:"affected_domains"`
	Evidence        []string  `json:"evidence"`
}

DNSAnomaly represents DNS anomalies

type DNSMetric

type DNSMetric struct {
	MetricID   string    `json:"metric_id"`
	MetricType string    `json:"metric_type"`
	Value      float64   `json:"value"`
	Timestamp  time.Time `json:"timestamp"`
	Domain     string    `json:"domain"`
}

type DNSPattern

type DNSPattern struct {
	PatternID   string   `json:"pattern_id"`
	PatternType string   `json:"pattern_type"`
	Domains     []string `json:"domains"`
	Frequency   int      `json:"frequency"`
	Periodicity bool     `json:"periodicity"`
	Anomalous   bool     `json:"anomalous"`
}

DNSPattern represents DNS patterns

type DNSQuery

type DNSQuery struct {
	QueryID      string        `json:"query_id"`
	Domain       string        `json:"domain"`
	QueryType    string        `json:"query_type"`
	Timestamp    time.Time     `json:"timestamp"`
	ResponseCode string        `json:"response_code"`
	ResponseTime time.Duration `json:"response_time"`
	Suspicious   bool          `json:"suspicious"`
}

DNSQuery represents DNS queries

type DNSResponse

type DNSResponse struct {
	ResponseID   string        `json:"response_id"`
	QueryID      string        `json:"query_id"`
	Domain       string        `json:"domain"`
	ResponseCode int           `json:"response_code"`
	ResponseTime time.Duration `json:"response_time"`
	Timestamp    time.Time     `json:"timestamp"`
	Answers      []string      `json:"answers"`
}

type DefenseCoordinationResult

type DefenseCoordinationResult struct {
	CoordinationScore    float64               `json:"coordination_score"`
	ActiveDefenses       []ActiveDefense       `json:"active_defenses"`
	DefenseGaps          []DefenseGap          `json:"defense_gaps"`
	CoordinatedResponses []CoordinatedResponse `json:"coordinated_responses"`
	DefenseEffectiveness float64               `json:"defense_effectiveness"`
}

DefenseCoordinationResult represents defense coordination results

type DefenseCoordinator

type DefenseCoordinator struct {
	// contains filtered or unexported fields
}

func NewDefenseCoordinator

func NewDefenseCoordinator() *DefenseCoordinator

type DefenseGap

type DefenseGap struct {
	GapType         string   `json:"gap_type"`
	Severity        string   `json:"severity"`
	Description     string   `json:"description"`
	AffectedAreas   []string `json:"affected_areas"`
	Recommendations []string `json:"recommendations"`
}

DefenseGap represents identified defense gaps

type DefenseRecommendation

type DefenseRecommendation struct {
	RecommendationID   string        `json:"recommendation_id"`
	RecommendationType string        `json:"recommendation_type"`
	Priority           string        `json:"priority"`
	Description        string        `json:"description"`
	Actions            []string      `json:"actions"`
	Timeline           time.Duration `json:"timeline"`
	Resources          []string      `json:"resources"`
	Effectiveness      float64       `json:"effectiveness"`
}

DefenseRecommendation represents defense recommendations

type DefenseSystem

type DefenseSystem struct {
	SystemID      string
	SystemType    string
	Status        string
	Capabilities  []string
	ResponseTime  time.Duration
	Effectiveness float64
}

type DependencyEdge

type DependencyEdge struct {
	Source       string
	Target       string
	Relationship string
	Weight       float64
}

type DependencyGraph

type DependencyGraph struct {
	// contains filtered or unexported fields
}

DependencyGraph represents the dependency graph structure

func NewDependencyGraph

func NewDependencyGraph() *DependencyGraph

func (*DependencyGraph) AddEdge

func (dg *DependencyGraph) AddEdge(from, to string)

func (*DependencyGraph) AddNode

func (dg *DependencyGraph) AddNode(node *DependencyNode)

func (*DependencyGraph) Reset

func (dg *DependencyGraph) Reset()

type DependencyNode

type DependencyNode struct {
	Name         string
	Version      string
	Dependencies []string
	Depth        int
	Visited      bool
	InStack      bool
	Complexity   float64
}

DependencyNode represents a node in the dependency graph

type DetectedBehavior

type DetectedBehavior struct {
	BehaviorID    string                 `json:"behavior_id"`
	BehaviorType  string                 `json:"behavior_type"`
	Category      string                 `json:"category"`
	Description   string                 `json:"description"`
	Confidence    float64                `json:"confidence"`
	RiskLevel     string                 `json:"risk_level"`
	FirstDetected time.Time              `json:"first_detected"`
	LastDetected  time.Time              `json:"last_detected"`
	Frequency     int                    `json:"frequency"`
	Context       map[string]interface{} `json:"context"`
	Indicators    []string               `json:"indicators"`
	Evidence      []string               `json:"evidence"`
}

DetectedBehavior represents detected behaviors

type DetectedCampaign

type DetectedCampaign struct {
	CampaignID     string        `json:"campaign_id"`
	CampaignType   string        `json:"campaign_type"`
	Stage          string        `json:"stage"`
	Confidence     float64       `json:"confidence"`
	StartTime      time.Time     `json:"start_time"`
	Duration       time.Duration `json:"duration"`
	AttackVectors  []string      `json:"attack_vectors"`
	TargetedAssets []string      `json:"targeted_assets"`
}

DetectedCampaign represents detected attack campaigns

type DetectedThreat

type DetectedThreat struct {
	ThreatID             string                 `json:"threat_id"`
	ThreatType           string                 `json:"threat_type"`
	ThreatCategory       string                 `json:"threat_category"`
	Severity             string                 `json:"severity"`
	Confidence           float64                `json:"confidence"`
	Description          string                 `json:"description"`
	Evidence             []string               `json:"evidence"`
	DetectionSource      string                 `json:"detection_source"`
	DetectionTimestamp   time.Time              `json:"detection_timestamp"`
	AffectedComponents   []string               `json:"affected_components"`
	PotentialImpact      string                 `json:"potential_impact"`
	MitigationStrategies []string               `json:"mitigation_strategies"`
	Context              map[string]interface{} `json:"context"`
}

DetectedThreat represents a detected security threat

type DetectionAlgorithm

type DetectionAlgorithm struct {
	AlgorithmID   string
	AlgorithmType string
	Parameters    map[string]interface{}
	Sensitivity   float64
	Specificity   float64
}

type DomainAnalysisRule

type DomainAnalysisRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type DomainAnalyzer

type DomainAnalyzer struct {
	// contains filtered or unexported fields
}

type DomainRecord

type DomainRecord struct {
	Domain      string
	Reputation  string
	Category    string
	LastUpdated time.Time
	Metadata    map[string]interface{}
}

type EcosystemCorrelation

type EcosystemCorrelation struct {
	EcosystemPair       []string `json:"ecosystem_pair"`
	CorrelationStrength float64  `json:"correlation_strength"`
	SharedThreats       []string `json:"shared_threats"`
	AttackVectors       []string `json:"attack_vectors"`
}

EcosystemCorrelation represents ecosystem correlations

type EffectivenessRecord

type EffectivenessRecord struct {
	Timestamp     time.Time
	DefenseSystem string
	ThreatType    string
	Effectiveness float64
	ResponseTime  time.Duration
}

type EffectivenessTracker

type EffectivenessTracker struct {
	// contains filtered or unexported fields
}

type EncryptionAnalysis

type EncryptionAnalysis struct {
	EncryptedTraffic    float64             `json:"encrypted_traffic"`
	EncryptionProtocols map[string]int      `json:"encryption_protocols"`
	WeakEncryption      []WeakEncryption    `json:"weak_encryption"`
	EncryptionAnomalies []EncryptionAnomaly `json:"encryption_anomalies"`
}

EncryptionAnalysis represents encryption analysis

type EncryptionAnalyzer

type EncryptionAnalyzer struct {
	// contains filtered or unexported fields
}

type EncryptionAnomaly

type EncryptionAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	Evidence      []string  `json:"evidence"`
}

EncryptionAnomaly represents encryption anomalies

type EncryptionDetector

type EncryptionDetector struct {
	DetectorID     string
	EncryptionType string
	DetectionLogic func(data []byte) EncryptionResult
	Enabled        bool
}

type EncryptionMetric

type EncryptionMetric struct {
	MetricID       string
	EncryptionType string
	MetricType     string
	Value          float64
	Timestamp      time.Time
}

type EncryptionResult

type EncryptionResult struct {
	Encrypted      bool
	EncryptionType string
	Strength       string
	Weaknesses     []string
	Confidence     float64
}

type EncryptionWeakness

type EncryptionWeakness struct {
	WeaknessID   string
	WeaknessType string
	Description  string
	Severity     string
	Mitigation   string
}

type EngagementMetrics

type EngagementMetrics struct {
	TotalUsers         int           `json:"total_users"`
	ActiveUsers        int           `json:"active_users"`
	AverageSessionTime time.Duration `json:"average_session_time"`
	SessionFrequency   float64       `json:"session_frequency"`
	UserRetentionRate  float64       `json:"user_retention_rate"`
	EngagementTrend    string        `json:"engagement_trend"`
}

EngagementMetrics represents engagement metrics

type EnsembleDefense

type EnsembleDefense struct {
	// contains filtered or unexported fields
}

func NewEnsembleDefense

func NewEnsembleDefense() *EnsembleDefense

type EnsembleDefenseResult

type EnsembleDefenseResult struct {
	EnsembleAgreement    float64            `json:"ensemble_agreement"`
	ConsensusScore       float64            `json:"consensus_score"`
	ModelDiscrepancies   []ModelDiscrepancy `json:"model_discrepancies"`
	DefenseEffectiveness float64            `json:"defense_effectiveness"`
}

EnsembleDefenseResult represents ensemble defense results

type EscalationDetector

type EscalationDetector struct {
	// contains filtered or unexported fields
}

type EscalationManager

type EscalationManager struct {
	// contains filtered or unexported fields
}

type EscalationPath

type EscalationPath struct {
	PathID          string        `json:"path_id"`
	TriggerSeverity string        `json:"trigger_severity"`
	EscalationSteps []string      `json:"escalation_steps"`
	Stakeholders    []string      `json:"stakeholders"`
	Timeline        time.Duration `json:"timeline"`
}

EscalationPath represents escalation paths

type EscalationPattern

type EscalationPattern struct {
	PatternID   string
	PatternType string
	Indicators  []string
	RiskLevel   string
}

type EscalationRule

type EscalationRule struct {
	RuleID           string        `json:"rule_id"`
	TriggerCondition string        `json:"trigger_condition"`
	EscalationDelay  time.Duration `json:"escalation_delay"`
	EscalationAction string        `json:"escalation_action"`
	Enabled          bool          `json:"enabled"`
}

EscalationRule defines escalation rules

type EvasionDetector

type EvasionDetector struct {
	DetectorType string
	Patterns     []string
	Confidence   float64
}

type EventCollector

type EventCollector struct {
	// contains filtered or unexported fields
}

type EventFilter

type EventFilter struct {
	FilterID   string
	FilterType string
	Criteria   map[string]interface{}
	Enabled    bool
}

type EventProcessor

type EventProcessor struct {
	ProcessorID     string
	ProcessorType   string
	ProcessingRules []ProcessingRule
	Enabled         bool
}

type EvolutionStage

type EvolutionStage struct {
	StageNumber     int       `json:"stage_number"`
	StageName       string    `json:"stage_name"`
	Timestamp       time.Time `json:"timestamp"`
	Characteristics []string  `json:"characteristics"`
	Changes         []string  `json:"changes"`
}

EvolutionStage represents pattern evolution stages

type ExecutionAnomaly

type ExecutionAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	Severity      string    `json:"severity"`
	Impact        string    `json:"impact"`
	Evidence      []string  `json:"evidence"`
}

ExecutionAnomaly represents execution anomalies

type ExecutionPattern

type ExecutionPattern struct {
	PatternID      string   `json:"pattern_id"`
	PatternType    string   `json:"pattern_type"`
	Processes      []string `json:"processes"`
	ExecutionOrder []string `json:"execution_order"`
	Frequency      int      `json:"frequency"`
	Timing         string   `json:"timing"`
	Anomalous      bool     `json:"anomalous"`
}

ExecutionPattern represents execution patterns

type ExpirationRecord

type ExpirationRecord struct {
	RecordID       string
	TokenID        string
	ExpirationTime time.Time
	CleanupTime    time.Time
	Action         string
}

type ExpirationRule

type ExpirationRule struct {
	RuleID         string
	TokenType      string
	ExpirationTime time.Duration
	CleanupAction  string
	Enabled        bool
}

type FeaturePoisoningDetector

type FeaturePoisoningDetector struct {
	// contains filtered or unexported fields
}

func NewFeaturePoisoningDetector

func NewFeaturePoisoningDetector() *FeaturePoisoningDetector

type FeaturePoisoningRisk

type FeaturePoisoningRisk struct {
	RiskLevel           string               `json:"risk_level"`
	ConfidenceScore     float64              `json:"confidence_score"`
	PoisonedFeatures    []PoisonedFeature    `json:"poisoned_features"`
	PoisoningTechniques []PoisoningTechnique `json:"poisoning_techniques"`
	ImpactAssessment    *PoisoningImpact     `json:"impact_assessment"`
}

FeaturePoisoningRisk represents feature poisoning risk assessment

type FileOperation

type FileOperation struct {
	OperationID   string    `json:"operation_id"`
	OperationType string    `json:"operation_type"`
	FilePath      string    `json:"file_path"`
	Timestamp     time.Time `json:"timestamp"`
	User          string    `json:"user"`
	Process       string    `json:"process"`
	Result        string    `json:"result"`
	Suspicious    bool      `json:"suspicious"`
}

FileOperation represents file operations

type FileSystemAnalysisResult

type FileSystemAnalysisResult struct {
	FileOperations      []FileOperation     `json:"file_operations"`
	AccessPatterns      []AccessPattern     `json:"access_patterns"`
	FileSystemAnomalies []FileSystemAnomaly `json:"filesystem_anomalies"`
	PermissionAnalysis  *PermissionAnalysis `json:"permission_analysis"`
	IntegrityAnalysis   *IntegrityAnalysis  `json:"integrity_analysis"`
}

FileSystemAnalysisResult represents file system analysis results

type FileSystemAnalyzer

type FileSystemAnalyzer struct {
	// contains filtered or unexported fields
}

type FileSystemAnomaly

type FileSystemAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	AffectedFiles []string  `json:"affected_files"`
	Severity      string    `json:"severity"`
	Evidence      []string  `json:"evidence"`
}

FileSystemAnomaly represents file system anomalies

type FileSystemRule

type FileSystemRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ForecastAnalysis

type ForecastAnalysis struct {
	ForecastHorizon    time.Duration  `json:"forecast_horizon"`
	ForecastAccuracy   float64        `json:"forecast_accuracy"`
	ForecastConfidence float64        `json:"forecast_confidence"`
	Predictions        []Prediction   `json:"predictions"`
	RiskForecasts      []RiskForecast `json:"risk_forecasts"`
}

ForecastAnalysis represents forecast analysis

type FraudDetectionRule

type FraudDetectionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type GeographicAnalyzer

type GeographicAnalyzer struct {
	// contains filtered or unexported fields
}

type GeographicInstallation

type GeographicInstallation struct {
	Country           string  `json:"country"`
	Region            string  `json:"region"`
	InstallationCount int     `json:"installation_count"`
	Percentage        float64 `json:"percentage"`
	Anomalous         bool    `json:"anomalous"`
}

GeographicInstallation represents geographic installation data

type GradientAnalysisResult

type GradientAnalysisResult struct {
	GradientStability   float64              `json:"gradient_stability"`
	GradientMagnitude   float64              `json:"gradient_magnitude"`
	SuspiciousGradients []SuspiciousGradient `json:"suspicious_gradients"`
	GradientAttacks     []GradientAttack     `json:"gradient_attacks"`
}

GradientAnalysisResult represents gradient analysis results

type GradientAnalyzer

type GradientAnalyzer struct {
	// contains filtered or unexported fields
}

func NewGradientAnalyzer

func NewGradientAnalyzer() *GradientAnalyzer

type GradientAttack

type GradientAttack struct {
	AttackType      string  `json:"attack_type"`
	TargetLayer     string  `json:"target_layer"`
	AttackMagnitude float64 `json:"attack_magnitude"`
	SuccessRate     float64 `json:"success_rate"`
}

GradientAttack represents detected gradient-based attacks

type GradientPattern

type GradientPattern struct {
	PatternType string
	Signature   []float64
	Confidence  float64
}

type ImpactAssessment

type ImpactAssessment struct {
	ImpactLevel     string        `json:"impact_level"`
	AffectedSystems []string      `json:"affected_systems"`
	BusinessImpact  string        `json:"business_impact"`
	TechnicalImpact string        `json:"technical_impact"`
	RecoveryTime    time.Duration `json:"recovery_time"`
}

ImpactAssessment represents threat impact assessment

type InputValidationResult

type InputValidationResult struct {
	ValidationStatus    string             `json:"validation_status"`
	AnomalousInputs     []AnomalousInput   `json:"anomalous_inputs"`
	ValidationMetrics   *ValidationMetrics `json:"validation_metrics"`
	SanitizationApplied bool               `json:"sanitization_applied"`
}

InputValidationResult represents input validation results

type InputValidator

type InputValidator struct {
	// contains filtered or unexported fields
}

func NewInputValidator

func NewInputValidator() *InputValidator

type InstallationAnalysisResult

type InstallationAnalysisResult struct {
	InstallationPatterns   []InstallationPattern    `json:"installation_patterns"`
	InstallationAnomalies  []InstallationAnomaly    `json:"installation_anomalies"`
	InstallationMetrics    *InstallationMetrics     `json:"installation_metrics"`
	GeographicDistribution []GeographicInstallation `json:"geographic_distribution"`
	TemporalDistribution   []TemporalInstallation   `json:"temporal_distribution"`
	UserBehaviorAnalysis   *UserBehaviorAnalysis    `json:"user_behavior_analysis"`
}

InstallationAnalysisResult represents installation analysis results

type InstallationAnalyzer

type InstallationAnalyzer struct {
	// contains filtered or unexported fields
}

type InstallationAnomaly

type InstallationAnomaly struct {
	AnomalyID         string    `json:"anomaly_id"`
	AnomalyType       string    `json:"anomaly_type"`
	DetectionTime     time.Time `json:"detection_time"`
	InstallationSpike bool      `json:"installation_spike"`
	UnusualGeography  bool      `json:"unusual_geography"`
	SuspiciousUsers   []string  `json:"suspicious_users"`
	BotActivity       bool      `json:"bot_activity"`
}

InstallationAnomaly represents installation anomalies

type InstallationMetrics

type InstallationMetrics struct {
	TotalInstallations      int     `json:"total_installations"`
	DailyInstallationRate   float64 `json:"daily_installation_rate"`
	WeeklyInstallationRate  float64 `json:"weekly_installation_rate"`
	MonthlyInstallationRate float64 `json:"monthly_installation_rate"`
	GrowthRate              float64 `json:"growth_rate"`
	RetentionRate           float64 `json:"retention_rate"`
	UninstallRate           float64 `json:"uninstall_rate"`
}

InstallationMetrics represents installation metrics

type InstallationPattern

type InstallationPattern struct {
	PatternID        string                 `json:"pattern_id"`
	PatternType      string                 `json:"pattern_type"`
	InstallationRate float64                `json:"installation_rate"`
	GeographicSpread string                 `json:"geographic_spread"`
	UserDemographics map[string]interface{} `json:"user_demographics"`
	Seasonality      bool                   `json:"seasonality"`
	Anomalous        bool                   `json:"anomalous"`
}

InstallationPattern represents installation patterns

type InstallationRecord

type InstallationRecord struct {
	InstallationID string
	PackageName    string
	Timestamp      time.Time
	UserID         string
	Location       string
	InstallMethod  string
	Context        map[string]interface{}
}

type IntegrityAnalysis

type IntegrityAnalysis struct {
	IntegrityChecks     []IntegrityCheck     `json:"integrity_checks"`
	IntegrityViolations []IntegrityViolation `json:"integrity_violations"`
	ChecksumAnalysis    *ChecksumAnalysis    `json:"checksum_analysis"`
	TamperingDetection  *TamperingDetection  `json:"tampering_detection"`
}

IntegrityAnalysis represents integrity analysis

type IntegrityCheck

type IntegrityCheck struct {
	CheckID       string    `json:"check_id"`
	FilePath      string    `json:"file_path"`
	CheckType     string    `json:"check_type"`
	Timestamp     time.Time `json:"timestamp"`
	Result        string    `json:"result"`
	ExpectedValue string    `json:"expected_value"`
	ActualValue   string    `json:"actual_value"`
	Passed        bool      `json:"passed"`
}

IntegrityCheck represents integrity checks

type IntegrityChecker

type IntegrityChecker struct {
	// contains filtered or unexported fields
}

type IntegrityRule

type IntegrityRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type IntegrityViolation

type IntegrityViolation struct {
	ViolationID   string    `json:"violation_id"`
	ViolationType string    `json:"violation_type"`
	DetectionTime time.Time `json:"detection_time"`
	FilePath      string    `json:"file_path"`
	Description   string    `json:"description"`
	Severity      string    `json:"severity"`
	Evidence      []string  `json:"evidence"`
}

IntegrityViolation represents integrity violations

type IntelSource

type IntelSource struct {
	SourceID    string
	SourceType  string
	Reliability float64
	LastUpdate  time.Time
	APIEndpoint string
}

type InteractionAnomaly

type InteractionAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	UserID        string    `json:"user_id"`
	Description   string    `json:"description"`
	Severity      string    `json:"severity"`
	Evidence      []string  `json:"evidence"`
}

InteractionAnomaly represents interaction anomalies

type InteractionPattern

type InteractionPattern struct {
	PatternID      string   `json:"pattern_id"`
	PatternType    string   `json:"pattern_type"`
	Description    string   `json:"description"`
	Frequency      int      `json:"frequency"`
	UserCount      int      `json:"user_count"`
	Typical        bool     `json:"typical"`
	RiskIndicators []string `json:"risk_indicators"`
}

InteractionPattern represents interaction patterns

type InteractionRecord

type InteractionRecord struct {
	RecordID     string
	UserID       string
	Timestamp    time.Time
	Interactions []UserInteraction
	Summary      string
}

type InteractionRule

type InteractionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type MFAProvider

type MFAProvider struct {
	ProviderID    string
	ProviderName  string
	ProviderType  string
	Configuration map[string]interface{}
	Enabled       bool
}

type MFAToken

type MFAToken struct {
	TokenID        string
	UserID         string
	TokenType      string
	Value          string
	CreationTime   time.Time
	ExpirationTime time.Time
	Status         string
	UsageCount     int
}

type MFAValidationRule

type MFAValidationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type MFAValidator

type MFAValidator struct {
	// contains filtered or unexported fields
}

type MLCountermeasure

type MLCountermeasure struct {
	CountermeasureType string   `json:"countermeasure_type"`
	Description        string   `json:"description"`
	Effectiveness      float64  `json:"effectiveness"`
	ImplementationCost string   `json:"implementation_cost"`
	Prerequisites      []string `json:"prerequisites"`
}

MLCountermeasure represents ML security countermeasures

type MLHardeningConfig

type MLHardeningConfig struct {
	EnableAdversarialDetection  bool          `yaml:"enable_adversarial_detection"`   // true
	EnableFeaturePoisoningCheck bool          `yaml:"enable_feature_poisoning_check"` // true
	EnableInputValidation       bool          `yaml:"enable_input_validation"`        // true
	EnableRobustnessValidation  bool          `yaml:"enable_robustness_validation"`   // true
	EnableGradientAnalysis      bool          `yaml:"enable_gradient_analysis"`       // true
	EnableEnsembleDefense       bool          `yaml:"enable_ensemble_defense"`        // true
	AdversarialThreshold        float64       `yaml:"adversarial_threshold"`          // 0.8
	PoisoningThreshold          float64       `yaml:"poisoning_threshold"`            // 0.7
	RobustnessThreshold         float64       `yaml:"robustness_threshold"`           // 0.6
	MaxPerturbationMagnitude    float64       `yaml:"max_perturbation_magnitude"`     // 0.1
	GradientAnalysisDepth       int           `yaml:"gradient_analysis_depth"`        // 5
	EnsembleSize                int           `yaml:"ensemble_size"`                  // 3
	ValidationTimeout           time.Duration `yaml:"validation_timeout"`             // 60s
	Enabled                     bool          `yaml:"enabled"`                        // true
}

MLHardeningConfig configures ML hardening parameters

func DefaultMLHardeningConfig

func DefaultMLHardeningConfig() *MLHardeningConfig

DefaultMLHardeningConfig returns default configuration

type MLHardeningResult

type MLHardeningResult struct {
	PackageName             string                      `json:"package_name"`
	OverallSecurityScore    float64                     `json:"overall_security_score"`
	AdversarialRisk         *AdversarialRisk            `json:"adversarial_risk"`
	FeaturePoisoningRisk    *FeaturePoisoningRisk       `json:"feature_poisoning_risk"`
	InputValidationResult   *InputValidationResult      `json:"input_validation_result"`
	RobustnessValidation    *RobustnessValidationResult `json:"robustness_validation"`
	GradientAnalysis        *GradientAnalysisResult     `json:"gradient_analysis"`
	EnsembleDefenseResult   *EnsembleDefenseResult      `json:"ensemble_defense_result"`
	DetectedVulnerabilities []MLVulnerability           `json:"detected_vulnerabilities"`
	Countermeasures         []MLCountermeasure          `json:"countermeasures"`
	Recommendations         []string                    `json:"recommendations"`
	Metadata                map[string]interface{}      `json:"metadata"`
}

MLHardeningResult represents ML hardening analysis results

type MLHardeningSystem

type MLHardeningSystem struct {
	// contains filtered or unexported fields
}

MLHardeningSystem provides comprehensive ML model hardening capabilities Addresses critical AI/ML vulnerabilities identified in adversarial assessment: - Adversarial example generation and detection - Feature poisoning attacks - Model evasion techniques - Gradient-based attacks - Input perturbation detection - Model robustness validation

func NewMLHardeningSystem

func NewMLHardeningSystem(config *MLHardeningConfig, logger logger.Logger) *MLHardeningSystem

NewMLHardeningSystem creates a new ML hardening system

func (*MLHardeningSystem) HardenMLModel

func (mh *MLHardeningSystem) HardenMLModel(ctx context.Context, pkg *types.Package, features map[string]float64) (*MLHardeningResult, error)

HardenMLModel performs comprehensive ML model hardening

type MLVulnerability

type MLVulnerability struct {
	VulnerabilityType  string    `json:"vulnerability_type"`
	Severity           string    `json:"severity"`
	Description        string    `json:"description"`
	ExploitPotential   float64   `json:"exploit_potential"`
	AffectedComponents []string  `json:"affected_components"`
	DetectionTime      time.Time `json:"detection_time"`
}

MLVulnerability represents detected ML vulnerabilities

type MaintainerProfile

type MaintainerProfile struct {
	Username           string
	Email              string
	Reputation         float64
	PackageCount       int
	AccountAge         time.Duration
	Verified           bool
	SuspiciousActivity bool
}

type MaintainerValidator

type MaintainerValidator struct {
	// contains filtered or unexported fields
}

Maintainer validation structures

func NewMaintainerValidator

func NewMaintainerValidator() *MaintainerValidator

type ManipulationTactic

type ManipulationTactic struct {
	Tactic      string   `json:"tactic"`
	Description string   `json:"description"`
	Indicators  []string `json:"indicators"`
	Confidence  float64  `json:"confidence"`
}

ManipulationTactic represents manipulation tactics

type MarketEvent

type MarketEvent struct {
	Name        string
	Trigger     string
	Probability float64
	Indicators  []string
}

MarketEvent represents market-based triggers

type MitigationStrategy

type MitigationStrategy struct {
	StrategyID     string        `json:"strategy_id"`
	StrategyType   string        `json:"strategy_type"`
	Description    string        `json:"description"`
	Priority       string        `json:"priority"`
	Effectiveness  float64       `json:"effectiveness"`
	Implementation []string      `json:"implementation"`
	Timeline       time.Duration `json:"timeline"`
	Resources      []string      `json:"resources"`
}

MitigationStrategy represents mitigation strategies

type ModelDiscrepancy

type ModelDiscrepancy struct {
	ModelPair              string   `json:"model_pair"`
	DiscrepancyScore       float64  `json:"discrepancy_score"`
	ConflictingPredictions []string `json:"conflicting_predictions"`
	SuspicionLevel         string   `json:"suspicion_level"`
}

ModelDiscrepancy represents discrepancies between ensemble models

type ModelRobustnessValidator

type ModelRobustnessValidator struct {
	// contains filtered or unexported fields
}

func NewModelRobustnessValidator

func NewModelRobustnessValidator() *ModelRobustnessValidator

type Monitor

type Monitor struct {
	MonitorID   string
	MonitorType string
	Status      string
	LastUpdate  time.Time
	Metrics     map[string]float64
}

type MonitoringRule

type MonitoringRule struct {
	RuleID    string
	Condition string
	Action    string
	Threshold float64
	Enabled   bool
}

type MultiVectorAnalysisResult

type MultiVectorAnalysisResult struct {
	PackageName            string                       `json:"package_name"`
	OverallThreatScore     float64                      `json:"overall_threat_score"`
	AttackCorrelation      *AttackCorrelationResult     `json:"attack_correlation"`
	DefenseCoordination    *DefenseCoordinationResult   `json:"defense_coordination"`
	ThreatIntelligence     *ThreatIntelligenceResult    `json:"threat_intelligence"`
	CrossEcosystemAnalysis *CrossEcosystemResult        `json:"cross_ecosystem_analysis"`
	CampaignDetection      *CampaignDetectionResult     `json:"campaign_detection"`
	ResponseOrchestration  *ResponseOrchestrationResult `json:"response_orchestration"`
	DetectedAttackVectors  []AttackVector               `json:"detected_attack_vectors"`
	CoordinatedThreats     []CoordinatedThreat          `json:"coordinated_threats"`
	DefenseRecommendations []DefenseRecommendation      `json:"defense_recommendations"`
	Metadata               map[string]interface{}       `json:"metadata"`
}

MultiVectorAnalysisResult represents multi-vector analysis results

type MultiVectorConfig

type MultiVectorConfig struct {
	EnableAttackCorrelation     bool          `yaml:"enable_attack_correlation"`      // true
	EnableDefenseCoordination   bool          `yaml:"enable_defense_coordination"`    // true
	EnableThreatIntelligence    bool          `yaml:"enable_threat_intelligence"`     // true
	EnableCrossEcosystemMonitor bool          `yaml:"enable_cross_ecosystem_monitor"` // true
	EnableCampaignDetection     bool          `yaml:"enable_campaign_detection"`      // true
	EnableResponseOrchestration bool          `yaml:"enable_response_orchestration"`  // true
	CorrelationWindow           time.Duration `yaml:"correlation_window"`             // 24h
	AttackThreshold             float64       `yaml:"attack_threshold"`               // 0.7
	CampaignThreshold           float64       `yaml:"campaign_threshold"`             // 0.8
	ResponseTimeout             time.Duration `yaml:"response_timeout"`               // 30s
	MaxConcurrentAnalysis       int           `yaml:"max_concurrent_analysis"`        // 10
	Enabled                     bool          `yaml:"enabled"`                        // true
}

MultiVectorConfig configures multi-vector coordination parameters

func DefaultMultiVectorConfig

func DefaultMultiVectorConfig() *MultiVectorConfig

DefaultMultiVectorConfig returns default configuration

type MultiVectorCoordinator

type MultiVectorCoordinator struct {
	// contains filtered or unexported fields
}

MultiVectorCoordinator provides comprehensive multi-vector attack detection and coordination Addresses critical vulnerabilities identified in adversarial assessment: - Coordinated attacks across multiple vectors - Cross-ecosystem supply chain attacks - Synchronized temporal attacks - Multi-stage attack campaigns - Attack pattern correlation - Defense coordination across security layers

func NewMultiVectorCoordinator

func NewMultiVectorCoordinator(config *MultiVectorConfig, logger logger.Logger) *MultiVectorCoordinator

NewMultiVectorCoordinator creates a new multi-vector coordinator

func (*MultiVectorCoordinator) AnalyzeMultiVectorThreats

func (mvc *MultiVectorCoordinator) AnalyzeMultiVectorThreats(ctx context.Context, pkg *types.Package) (*MultiVectorAnalysisResult, error)

AnalyzeMultiVectorThreats performs comprehensive multi-vector threat analysis

type NetworkAnalysisResult

type NetworkAnalysisResult struct {
	NetworkConnections    []NetworkConnection    `json:"network_connections"`
	CommunicationPatterns []CommunicationPattern `json:"communication_patterns"`
	NetworkAnomalies      []NetworkAnomaly       `json:"network_anomalies"`
	TrafficAnalysis       *TrafficAnalysis       `json:"traffic_analysis"`
	DNSAnalysis           *DNSAnalysis           `json:"dns_analysis"`
	ProtocolAnalysis      *ProtocolAnalysis      `json:"protocol_analysis"`
}

NetworkAnalysisResult represents network analysis results

type NetworkAnalyzer

type NetworkAnalyzer struct {
	// contains filtered or unexported fields
}

type NetworkAnomaly

type NetworkAnomaly struct {
	AnomalyID           string    `json:"anomaly_id"`
	AnomalyType         string    `json:"anomaly_type"`
	DetectionTime       time.Time `json:"detection_time"`
	Description         string    `json:"description"`
	Severity            string    `json:"severity"`
	AffectedConnections []string  `json:"affected_connections"`
	Evidence            []string  `json:"evidence"`
}

NetworkAnomaly represents network anomalies

type NetworkConnection

type NetworkConnection struct {
	ConnectionID     string        `json:"connection_id"`
	SourceIP         string        `json:"source_ip"`
	DestinationIP    string        `json:"destination_ip"`
	SourcePort       int           `json:"source_port"`
	DestinationPort  int           `json:"destination_port"`
	Protocol         string        `json:"protocol"`
	Timestamp        time.Time     `json:"timestamp"`
	Duration         time.Duration `json:"duration"`
	BytesTransferred int64         `json:"bytes_transferred"`
	Suspicious       bool          `json:"suspicious"`
}

NetworkConnection represents network connections

type NewBehavior

type NewBehavior struct {
	BehaviorID    string    `json:"behavior_id"`
	BehaviorType  string    `json:"behavior_type"`
	Description   string    `json:"description"`
	FirstObserved time.Time `json:"first_observed"`
	Frequency     int       `json:"frequency"`
	RiskLevel     string    `json:"risk_level"`
	Confidence    float64   `json:"confidence"`
}

NewBehavior represents new behaviors

type NotificationChannel

type NotificationChannel struct {
	ChannelID     string                 `json:"channel_id"`
	ChannelType   string                 `json:"channel_type"`
	Configuration map[string]interface{} `json:"configuration"`
	Enabled       bool                   `json:"enabled"`
}

NotificationChannel defines notification channels

type OrchestrationRule

type OrchestrationRule struct {
	RuleID        string
	TriggerEvent  string
	ResponseChain []string
	Priority      int
	Conditions    []string
}

type PatternDetectionResult

type PatternDetectionResult struct {
	DetectedPatterns     []BehavioralPattern   `json:"detected_patterns"`
	PatternConfidence    float64               `json:"pattern_confidence"`
	SuspiciousPatterns   []SuspiciousPattern   `json:"suspicious_patterns"`
	PatternEvolution     []PatternEvolution    `json:"pattern_evolution"`
	CrossPackagePatterns []CrossPackagePattern `json:"cross_package_patterns"`
}

PatternDetectionResult represents pattern detection results

type PatternDetector

type PatternDetector struct {
	// contains filtered or unexported fields
}

type PatternEvolution

type PatternEvolution struct {
	PatternID       string              `json:"pattern_id"`
	EvolutionStages []EvolutionStage    `json:"evolution_stages"`
	EvolutionRate   float64             `json:"evolution_rate"`
	Trajectory      string              `json:"trajectory"`
	Predictions     []PatternPrediction `json:"predictions"`
}

PatternEvolution represents pattern evolution over time

type PatternMatcher

type PatternMatcher struct {
	// contains filtered or unexported fields
}

type PatternPrediction

type PatternPrediction struct {
	PredictionID    string        `json:"prediction_id"`
	PredictedChange string        `json:"predicted_change"`
	Probability     float64       `json:"probability"`
	TimeFrame       time.Duration `json:"time_frame"`
	Confidence      float64       `json:"confidence"`
}

PatternPrediction represents pattern predictions

type PatternRecord

type PatternRecord struct {
	RecordID        string
	PatternID       string
	Timestamp       time.Time
	Characteristics map[string]interface{}
	Confidence      float64
}

type PerformanceImpact

type PerformanceImpact struct {
	AnalysisTime     time.Duration `json:"analysis_time"`
	MemoryUsage      int64         `json:"memory_usage"`
	OperationsCount  int64         `json:"operations_count"`
	TimeoutRisk      float64       `json:"timeout_risk"`
	MemoryExhaustion float64       `json:"memory_exhaustion"`
}

PerformanceImpact represents performance impact metrics

type PerformanceMetric

type PerformanceMetric struct {
	MetricID   string
	MetricType string
	Value      float64
	Timestamp  time.Time
	Unit       string
}

type PerformanceMetrics

type PerformanceMetrics struct {
	CPUUsage       float64       `json:"cpu_usage"`
	MemoryUsage    float64       `json:"memory_usage"`
	DiskUsage      float64       `json:"disk_usage"`
	NetworkUsage   float64       `json:"network_usage"`
	ExecutionTime  time.Duration `json:"execution_time"`
	ResponseTime   time.Duration `json:"response_time"`
	ThroughputRate float64       `json:"throughput_rate"`
	ErrorRate      float64       `json:"error_rate"`
}

PerformanceMetrics represents performance metrics

type PerformanceMonitor

type PerformanceMonitor struct {
	// contains filtered or unexported fields
}

PerformanceMonitor tracks analysis performance

func NewPerformanceMonitor

func NewPerformanceMonitor() *PerformanceMonitor

func (*PerformanceMonitor) GetElapsedTime

func (pm *PerformanceMonitor) GetElapsedTime() time.Duration

func (*PerformanceMonitor) Start

func (pm *PerformanceMonitor) Start()

func (*PerformanceMonitor) Stop

func (pm *PerformanceMonitor) Stop()

type PerformanceRecord

type PerformanceRecord struct {
	RecordID  string
	ProcessID string
	Timestamp time.Time
	Metrics   map[string]float64
	Status    string
}

type PerformanceTracker

type PerformanceTracker struct {
	// contains filtered or unexported fields
}

type PermissionAnalysis

type PermissionAnalysis struct {
	PermissionChanges   []PermissionChange    `json:"permission_changes"`
	UnusualPermissions  []UnusualPermission   `json:"unusual_permissions"`
	PrivilegeEscalation []PrivilegeEscalation `json:"privilege_escalation"`
	PermissionAnomalies []PermissionAnomaly   `json:"permission_anomalies"`
}

PermissionAnalysis represents permission analysis

type PermissionAnalyzer

type PermissionAnalyzer struct {
	// contains filtered or unexported fields
}

type PermissionAnomaly

type PermissionAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	AffectedFiles []string  `json:"affected_files"`
	Evidence      []string  `json:"evidence"`
}

PermissionAnomaly represents permission anomalies

type PermissionChange

type PermissionChange struct {
	ChangeID       string    `json:"change_id"`
	FilePath       string    `json:"file_path"`
	OldPermissions string    `json:"old_permissions"`
	NewPermissions string    `json:"new_permissions"`
	Timestamp      time.Time `json:"timestamp"`
	User           string    `json:"user"`
	Process        string    `json:"process"`
	Suspicious     bool      `json:"suspicious"`
}

PermissionChange represents permission changes

type PermissionRule

type PermissionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type PerturbationDetector

type PerturbationDetector struct {
	DetectorType string
	Threshold    float64
	Sensitivity  float64
}

type PerturbationTest

type PerturbationTest struct {
	PerturbationType string  `json:"perturbation_type"`
	Magnitude        float64 `json:"magnitude"`
	SuccessRate      float64 `json:"success_rate"`
	ModelResponse    string  `json:"model_response"`
	ExpectedResponse string  `json:"expected_response"`
}

PerturbationTest represents perturbation testing results

type PerturbationTestConfig

type PerturbationTestConfig struct {
	TestType      string
	Magnitude     float64
	Iterations    int
	ExpectedRange float64
}

type PoisonedFeature

type PoisonedFeature struct {
	FeatureName     string   `json:"feature_name"`
	PoisonScore     float64  `json:"poison_score"`
	AnomalyLevel    string   `json:"anomaly_level"`
	Evidence        []string `json:"evidence"`
	OriginalValue   float64  `json:"original_value"`
	SuspiciousValue float64  `json:"suspicious_value"`
}

PoisonedFeature represents a potentially poisoned feature

type PoisoningImpact

type PoisoningImpact struct {
	ModelAccuracyDrop  float64 `json:"model_accuracy_drop"`
	FalsePositiveRate  float64 `json:"false_positive_rate"`
	FalseNegativeRate  float64 `json:"false_negative_rate"`
	OverallDegradation float64 `json:"overall_degradation"`
}

PoisoningImpact represents the impact of feature poisoning

type PoisoningPattern

type PoisoningPattern struct {
	PatternType string
	Indicators  []string
	Severity    string
}

type PoisoningTechnique

type PoisoningTechnique struct {
	Technique   string   `json:"technique"`
	Description string   `json:"description"`
	Confidence  float64  `json:"confidence"`
	Indicators  []string `json:"indicators"`
}

PoisoningTechnique represents feature poisoning techniques

type PredictedTrigger

type PredictedTrigger struct {
	Type          string    `json:"type"`
	Trigger       string    `json:"trigger"`
	Probability   float64   `json:"probability"`
	EstimatedDate time.Time `json:"estimated_date,omitempty"`
}

PredictedTrigger represents a predicted activation trigger

type Prediction

type Prediction struct {
	PredictionID       string    `json:"prediction_id"`
	PredictionType     string    `json:"prediction_type"`
	Timestamp          time.Time `json:"timestamp"`
	PredictedValue     float64   `json:"predicted_value"`
	ConfidenceInterval []float64 `json:"confidence_interval"`
	Probability        float64   `json:"probability"`
}

Prediction represents predictions

type PrivilegeEscalation

type PrivilegeEscalation struct {
	EscalationID   string    `json:"escalation_id"`
	EscalationType string    `json:"escalation_type"`
	DetectionTime  time.Time `json:"detection_time"`
	User           string    `json:"user"`
	Process        string    `json:"process"`
	Method         string    `json:"method"`
	Success        bool      `json:"success"`
	Evidence       []string  `json:"evidence"`
}

PrivilegeEscalation represents privilege escalation

type ProcessAnalysisResult

type ProcessAnalysisResult struct {
	ProcessBehaviors     []ProcessBehavior     `json:"process_behaviors"`
	ProcessAnomalies     []ProcessAnomaly      `json:"process_anomalies"`
	ProcessRelationships []ProcessRelationship `json:"process_relationships"`
	ExecutionPatterns    []ExecutionPattern    `json:"execution_patterns"`
	ProcessMetrics       *ProcessMetrics       `json:"process_metrics"`
}

ProcessAnalysisResult represents process analysis results

type ProcessAnalyzer

type ProcessAnalyzer struct {
	// contains filtered or unexported fields
}

type ProcessAnomaly

type ProcessAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	ProcessID     string    `json:"process_id"`
	ProcessName   string    `json:"process_name"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	Severity      string    `json:"severity"`
	Evidence      []string  `json:"evidence"`
}

ProcessAnomaly represents process anomalies

type ProcessAnomalyDetector

type ProcessAnomalyDetector struct {
	// contains filtered or unexported fields
}

type ProcessAnomalyModel

type ProcessAnomalyModel struct {
	ModelID     string
	ModelType   string
	Parameters  map[string]interface{}
	Sensitivity float64
}

type ProcessBaseline

type ProcessBaseline struct {
	BaselineID     string
	ProcessType    string
	NormalBehavior map[string]interface{}
	Thresholds     map[string]float64
	LastUpdated    time.Time
}

type ProcessBaselineManager

type ProcessBaselineManager struct {
	// contains filtered or unexported fields
}

type ProcessBehavior

type ProcessBehavior struct {
	BehaviorID    string             `json:"behavior_id"`
	ProcessID     string             `json:"process_id"`
	ProcessName   string             `json:"process_name"`
	BehaviorType  string             `json:"behavior_type"`
	Description   string             `json:"description"`
	StartTime     time.Time          `json:"start_time"`
	Duration      time.Duration      `json:"duration"`
	ResourceUsage map[string]float64 `json:"resource_usage"`
	Suspicious    bool               `json:"suspicious"`
}

ProcessBehavior represents process behaviors

type ProcessBehaviorAnalyzer

type ProcessBehaviorAnalyzer struct {
	// contains filtered or unexported fields
}

type ProcessBehaviorPattern

type ProcessBehaviorPattern struct {
	PatternID       string
	PatternType     string
	Characteristics map[string]interface{}
	Frequency       int
	Normal          bool
}

type ProcessInfo

type ProcessInfo struct {
	ProcessID      string
	ProcessName    string
	StartTime      time.Time
	Status         string
	ResourceUsage  map[string]float64
	ParentProcess  string
	ChildProcesses []string
}

type ProcessMetrics

type ProcessMetrics struct {
	TotalProcesses         int                `json:"total_processes"`
	ActiveProcesses        int                `json:"active_processes"`
	AverageLifetime        time.Duration      `json:"average_lifetime"`
	ProcessCreationRate    float64            `json:"process_creation_rate"`
	ProcessTerminationRate float64            `json:"process_termination_rate"`
	ResourceUtilization    map[string]float64 `json:"resource_utilization"`
}

ProcessMetrics represents process metrics

type ProcessMonitor

type ProcessMonitor struct {
	// contains filtered or unexported fields
}

type ProcessPerformanceMetric

type ProcessPerformanceMetric struct {
	MetricID   string
	ProcessID  string
	MetricType string
	Value      float64
	Timestamp  time.Time
	Unit       string
}

type ProcessPerformanceTracker

type ProcessPerformanceTracker struct {
	// contains filtered or unexported fields
}

type ProcessRecord

type ProcessRecord struct {
	RecordID  string
	ProcessID string
	Timestamp time.Time
	Event     string
	Details   map[string]interface{}
}

type ProcessRelationship

type ProcessRelationship struct {
	RelationshipID   string    `json:"relationship_id"`
	ParentProcess    string    `json:"parent_process"`
	ChildProcess     string    `json:"child_process"`
	RelationshipType string    `json:"relationship_type"`
	CreationTime     time.Time `json:"creation_time"`
	Suspicious       bool      `json:"suspicious"`
}

ProcessRelationship represents process relationships

type ProcessRule

type ProcessRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ProcessSecurityAnalyzer

type ProcessSecurityAnalyzer struct {
	// contains filtered or unexported fields
}

type ProcessSecurityRule

type ProcessSecurityRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ProcessThreat

type ProcessThreat struct {
	ThreatID      string
	ThreatType    string
	ProcessID     string
	DetectionTime time.Time
	Severity      string
	Evidence      []string
}

type ProcessThreatDetector

type ProcessThreatDetector struct {
	// contains filtered or unexported fields
}

type ProcessThreatPattern

type ProcessThreatPattern struct {
	PatternID  string
	ThreatType string
	Indicators []string
	RiskLevel  string
}

type ProcessVulnerability

type ProcessVulnerability struct {
	VulnerabilityID   string
	VulnerabilityType string
	Severity          string
	Description       string
	Mitigation        string
}

type ProcessVulnerabilityScanner

type ProcessVulnerabilityScanner struct {
	// contains filtered or unexported fields
}

type ProcessingRule

type ProcessingRule struct {
	RuleID    string
	Condition string
	Action    string
	Priority  int
}

type ProfileRule

type ProfileRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ProgressionRule

type ProgressionRule struct {
	RuleID          string
	StageTransition string
	Indicators      []string
	Confidence      float64
}

type ProgressionTracker

type ProgressionTracker struct {
	// contains filtered or unexported fields
}

type PropagationRule

type PropagationRule struct {
	SourceEcosystem   string
	TargetEcosystem   string
	PropagationVector string
	Probability       float64
	TimeDelay         time.Duration
}

type ProtocolAnalysis

type ProtocolAnalysis struct {
	ProtocolUsage      map[string]int      `json:"protocol_usage"`
	ProtocolPatterns   []ProtocolPattern   `json:"protocol_patterns"`
	ProtocolAnomalies  []ProtocolAnomaly   `json:"protocol_anomalies"`
	EncryptionAnalysis *EncryptionAnalysis `json:"encryption_analysis"`
}

ProtocolAnalysis represents protocol analysis

type ProtocolAnalysisResult

type ProtocolAnalysisResult struct {
	Protocol   string
	Analysis   map[string]interface{}
	Anomalies  []string
	Confidence float64
}

type ProtocolAnalyzer

type ProtocolAnalyzer struct {
	// contains filtered or unexported fields
}

type ProtocolAnomaly

type ProtocolAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	Protocol      string    `json:"protocol"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	Description   string    `json:"description"`
	Evidence      []string  `json:"evidence"`
}

ProtocolAnomaly represents protocol anomalies

type ProtocolHandler

type ProtocolHandler struct {
	HandlerID string
	Protocol  string
	Handler   func(data []byte) ProtocolAnalysisResult
	Enabled   bool
}

type ProtocolMetric

type ProtocolMetric struct {
	MetricID   string
	Protocol   string
	MetricType string
	Value      float64
	Timestamp  time.Time
}

type ProtocolPattern

type ProtocolPattern struct {
	PatternID    string `json:"pattern_id"`
	Protocol     string `json:"protocol"`
	UsagePattern string `json:"usage_pattern"`
	Frequency    int    `json:"frequency"`
	DataVolume   int64  `json:"data_volume"`
	Typical      bool   `json:"typical"`
}

ProtocolPattern represents protocol patterns

type PsychologicalTrigger

type PsychologicalTrigger struct {
	Type        string  `json:"type"`
	Description string  `json:"description"`
	Severity    string  `json:"severity"`
	Confidence  float64 `json:"confidence"`
}

PsychologicalTrigger represents psychological manipulation triggers

type RedFlag

type RedFlag struct {
	Flag        string    `json:"flag"`
	Severity    string    `json:"severity"`
	Description string    `json:"description"`
	Evidence    []string  `json:"evidence"`
	Timestamp   time.Time `json:"timestamp"`
}

RedFlag represents trust red flags

type RemovedBehavior

type RemovedBehavior struct {
	BehaviorID   string    `json:"behavior_id"`
	BehaviorType string    `json:"behavior_type"`
	Description  string    `json:"description"`
	LastObserved time.Time `json:"last_observed"`
	RemovalTime  time.Time `json:"removal_time"`
	Reason       string    `json:"reason"`
}

RemovedBehavior represents removed behaviors

type ReportGenerationRule

type ReportGenerationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ReportSection

type ReportSection struct {
	SectionID   string
	SectionName string
	Content     string
	DataSources []string
}

type ReportTemplate

type ReportTemplate struct {
	TemplateID   string
	TemplateName string
	Format       string
	Sections     []ReportSection
	Parameters   map[string]interface{}
}

type ResearcherProfile

type ResearcherProfile struct {
	Name         string
	Institution  string
	Publications int
	Citations    int
	HIndex       float64
	Verified     bool
}

type ResearcherValidator

type ResearcherValidator struct {
	// contains filtered or unexported fields
}

Researcher validation structures

func NewResearcherValidator

func NewResearcherValidator() *ResearcherValidator

type ResourceUsagePattern

type ResourceUsagePattern struct {
	PatternID    string  `json:"pattern_id"`
	ResourceType string  `json:"resource_type"`
	UsagePattern string  `json:"usage_pattern"`
	PeakUsage    float64 `json:"peak_usage"`
	AverageUsage float64 `json:"average_usage"`
	UsageTrend   string  `json:"usage_trend"`
	Anomalous    bool    `json:"anomalous"`
}

ResourceUsagePattern represents resource usage patterns

type ResponseAction

type ResponseAction struct {
	ActionID      string                 `json:"action_id"`
	ActionType    string                 `json:"action_type"`
	ActionStatus  string                 `json:"action_status"`
	Description   string                 `json:"description"`
	ExecutionTime time.Time              `json:"execution_time"`
	Result        string                 `json:"result"`
	Parameters    map[string]interface{} `json:"parameters"`
}

ResponseAction represents automated response actions

type ResponseActionHandler

type ResponseActionHandler func(ctx context.Context, params map[string]interface{}) error

ResponseActionHandler defines response action handlers

type ResponseChain

type ResponseChain struct {
	ChainID        string   `json:"chain_id"`
	ChainType      string   `json:"chain_type"`
	Responses      []string `json:"responses"`
	ExecutionOrder []int    `json:"execution_order"`
	Dependencies   []string `json:"dependencies"`
	Success        bool     `json:"success"`
}

ResponseChain represents response chains

type ResponseOrchestrationResult

type ResponseOrchestrationResult struct {
	OrchestrationScore float64           `json:"orchestration_score"`
	ActiveResponses    []ActiveResponse  `json:"active_responses"`
	ResponseChains     []ResponseChain   `json:"response_chains"`
	AutomatedActions   []AutomatedAction `json:"automated_actions"`
	EscalationPaths    []EscalationPath  `json:"escalation_paths"`
}

ResponseOrchestrationResult represents response orchestration results

type ResponseOrchestrationService

type ResponseOrchestrationService struct {
	// contains filtered or unexported fields
}

ResponseOrchestrationService manages automated response actions

type ResponseOrchestrator

type ResponseOrchestrator struct {
	// contains filtered or unexported fields
}

func NewResponseOrchestrator

func NewResponseOrchestrator() *ResponseOrchestrator

type ResponseRecord

type ResponseRecord struct {
	RecordID        string                 `json:"record_id"`
	RuleID          string                 `json:"rule_id"`
	ActionType      string                 `json:"action_type"`
	ExecutionTime   time.Time              `json:"execution_time"`
	ExecutionResult string                 `json:"execution_result"`
	Parameters      map[string]interface{} `json:"parameters"`
	Success         bool                   `json:"success"`
	ErrorMessage    string                 `json:"error_message"`
}

ResponseRecord represents response execution records

type ResponseRule

type ResponseRule struct {
	RuleID           string                 `json:"rule_id"`
	RuleName         string                 `json:"rule_name"`
	TriggerCondition string                 `json:"trigger_condition"`
	ActionType       string                 `json:"action_type"`
	Parameters       map[string]interface{} `json:"parameters"`
	Enabled          bool                   `json:"enabled"`
	Priority         int                    `json:"priority"`
}

ResponseRule defines automated response rules

type ResponseSystem

type ResponseSystem struct {
	SystemID     string
	SystemType   string
	Capabilities []string
	Status       string
	ResponseTime time.Duration
}

type ResponseTemplate

type ResponseTemplate struct {
	TemplateID    string
	ThreatType    string
	ResponseSteps []string
	Timeline      time.Duration
	Resources     []string
}

type RiskAssessment

type RiskAssessment struct {
	// contains filtered or unexported fields
}

type RiskCategory

type RiskCategory struct {
	CategoryID   string   `json:"category_id"`
	CategoryName string   `json:"category_name"`
	RiskLevel    string   `json:"risk_level"`
	RiskScore    float64  `json:"risk_score"`
	Contributing []string `json:"contributing_factors"`
	Mitigation   []string `json:"mitigation"`
}

RiskCategory represents risk categories

type RiskFactor

type RiskFactor struct {
	FactorType string
	Weight     float64
	Threshold  float64
}

type RiskForecast

type RiskForecast struct {
	ForecastID      string        `json:"forecast_id"`
	RiskType        string        `json:"risk_type"`
	TimeFrame       time.Duration `json:"time_frame"`
	RiskProbability float64       `json:"risk_probability"`
	RiskImpact      string        `json:"risk_impact"`
	Mitigation      []string      `json:"mitigation"`
}

RiskForecast represents risk forecasts

type RiskTrend

type RiskTrend struct {
	TrendID      string        `json:"trend_id"`
	TrendType    string        `json:"trend_type"`
	Direction    string        `json:"direction"`
	Magnitude    float64       `json:"magnitude"`
	TimeFrame    time.Duration `json:"time_frame"`
	Confidence   float64       `json:"confidence"`
	Implications []string      `json:"implications"`
}

RiskTrend represents risk trends

type RobustnessValidationResult

type RobustnessValidationResult struct {
	RobustnessScore   float64            `json:"robustness_score"`
	StabilityMetrics  *StabilityMetrics  `json:"stability_metrics"`
	PerturbationTests []PerturbationTest `json:"perturbation_tests"`
	WeaknessAreas     []WeaknessArea     `json:"weakness_areas"`
}

RobustnessValidationResult represents model robustness validation

type RuntimeAnalysisResult

type RuntimeAnalysisResult struct {
	RuntimeBehaviors      []RuntimeBehavior      `json:"runtime_behaviors"`
	PerformanceMetrics    *PerformanceMetrics    `json:"performance_metrics"`
	ResourceUsagePatterns []ResourceUsagePattern `json:"resource_usage_patterns"`
	ExecutionAnomalies    []ExecutionAnomaly     `json:"execution_anomalies"`
	SecurityEvents        []SecurityEvent        `json:"security_events"`
}

RuntimeAnalysisResult represents runtime analysis results

type RuntimeAnalyzer

type RuntimeAnalyzer struct {
	// contains filtered or unexported fields
}

type RuntimeBehavior

type RuntimeBehavior struct {
	BehaviorID     string        `json:"behavior_id"`
	BehaviorType   string        `json:"behavior_type"`
	Description    string        `json:"description"`
	Frequency      int           `json:"frequency"`
	Duration       time.Duration `json:"duration"`
	ResourceImpact string        `json:"resource_impact"`
	SecurityImpact string        `json:"security_impact"`
	Anomalous      bool          `json:"anomalous"`
}

RuntimeBehavior represents runtime behaviors

type RuntimeMonitor

type RuntimeMonitor struct {
	// contains filtered or unexported fields
}

type SanitizationRule

type SanitizationRule struct {
	RuleType    string
	Pattern     string
	Replacement string
	Priority    int
}

type ScanMetric

type ScanMetric struct {
	MetricID        string        `json:"metric_id"`
	ScanType        string        `json:"scan_type"`
	ScanCount       int           `json:"scan_count"`
	SuccessRate     float64       `json:"success_rate"`
	AverageDuration time.Duration `json:"average_duration"`
	LastScan        time.Time     `json:"last_scan"`
}

ScanMetric represents scan metrics

type SeasonalPattern

type SeasonalPattern struct {
	Name        string
	StartMonth  int
	EndMonth    int
	Probability float64
	Indicators  []string
}

SeasonalPattern represents seasonal activation patterns

type SecurityAlert

type SecurityAlert struct {
	AlertID         string                 `json:"alert_id"`
	AlertType       string                 `json:"alert_type"`
	Severity        string                 `json:"severity"`
	Title           string                 `json:"title"`
	Message         string                 `json:"message"`
	Timestamp       time.Time              `json:"timestamp"`
	Source          string                 `json:"source"`
	AffectedPackage string                 `json:"affected_package"`
	Context         map[string]interface{} `json:"context"`
	Acknowledged    bool                   `json:"acknowledged"`
}

SecurityAlert represents security alerts

type SecurityCoordinator

type SecurityCoordinator struct {
	// contains filtered or unexported fields
}

SecurityCoordinator orchestrates all security components for comprehensive threat detection Integrates: temporal detection, complexity analysis, trust validation, ML hardening, multi-vector coordination, and behavioral analysis

func NewSecurityCoordinator

func NewSecurityCoordinator(config *SecurityCoordinatorConfig, logger logger.Logger) *SecurityCoordinator

NewSecurityCoordinator creates a new security coordinator

func (*SecurityCoordinator) PerformComprehensiveSecurityAnalysis

func (sc *SecurityCoordinator) PerformComprehensiveSecurityAnalysis(ctx context.Context, pkg *types.Package) (*ComprehensiveSecurityResult, error)

PerformComprehensiveSecurityAnalysis performs comprehensive security analysis

type SecurityCoordinatorConfig

type SecurityCoordinatorConfig struct {
	EnableTemporalDetection     bool          `yaml:"enable_temporal_detection"`     // true
	EnableComplexityAnalysis    bool          `yaml:"enable_complexity_analysis"`    // true
	EnableTrustValidation       bool          `yaml:"enable_trust_validation"`       // true
	EnableMLHardening           bool          `yaml:"enable_ml_hardening"`           // true
	EnableMultiVectorDetection  bool          `yaml:"enable_multi_vector_detection"` // true
	EnableBehavioralAnalysis    bool          `yaml:"enable_behavioral_analysis"`    // true
	EnableThreatIntelligence    bool          `yaml:"enable_threat_intelligence"`    // true
	EnableResponseOrchestration bool          `yaml:"enable_response_orchestration"` // true
	EnableSecurityMetrics       bool          `yaml:"enable_security_metrics"`       // true
	EnableAlertManagement       bool          `yaml:"enable_alert_management"`       // true
	MaxConcurrentScans          int           `yaml:"max_concurrent_scans"`          // 10
	ScanTimeout                 time.Duration `yaml:"scan_timeout"`                  // 30m
	ThreatScoreThreshold        float64       `yaml:"threat_score_threshold"`        // 0.7
	CriticalThreatThreshold     float64       `yaml:"critical_threat_threshold"`     // 0.9
	AutoResponseEnabled         bool          `yaml:"auto_response_enabled"`         // false
	Enabled                     bool          `yaml:"enabled"`                       // true
}

SecurityCoordinatorConfig configures the security coordinator

type SecurityEvent

type SecurityEvent struct {
	EventID     string                 `json:"event_id"`
	EventType   string                 `json:"event_type"`
	Timestamp   time.Time              `json:"timestamp"`
	Severity    string                 `json:"severity"`
	Description string                 `json:"description"`
	Source      string                 `json:"source"`
	Target      string                 `json:"target"`
	Action      string                 `json:"action"`
	Result      string                 `json:"result"`
	Context     map[string]interface{} `json:"context"`
}

SecurityEvent represents security events

type SecurityMetrics

type SecurityMetrics struct {
	// contains filtered or unexported fields
}

SecurityMetrics tracks security metrics

type SecurityMetricsResult

type SecurityMetricsResult struct {
	ScanMetrics        []ScanMetric        `json:"scan_metrics"`
	ThreatMetrics      []ThreatMetric      `json:"threat_metrics"`
	PerformanceMetrics []PerformanceMetric `json:"performance_metrics"`
	AlertMetrics       []AlertMetric       `json:"alert_metrics"`
	OverallHealth      string              `json:"overall_health"`
	HealthScore        float64             `json:"health_score"`
	GeneratedAt        time.Time           `json:"generated_at"`
}

SecurityMetricsResult represents security metrics results

type SecurityMonitor

type SecurityMonitor struct {
	// contains filtered or unexported fields
}

type SecurityPerformanceMetric

type SecurityPerformanceMetric struct {
	MetricID       string        `json:"metric_id"`
	ComponentName  string        `json:"component_name"`
	AverageLatency time.Duration `json:"average_latency"`
	Throughput     float64       `json:"throughput"`
	ErrorRate      float64       `json:"error_rate"`
	ResourceUsage  float64       `json:"resource_usage"`
}

SecurityPerformanceMetric represents performance metrics

type SecurityRecommendation

type SecurityRecommendation struct {
	RecommendationID   string    `json:"recommendation_id"`
	RecommendationType string    `json:"recommendation_type"`
	Priority           string    `json:"priority"`
	Title              string    `json:"title"`
	Description        string    `json:"description"`
	ActionItems        []string  `json:"action_items"`
	EstimatedEffort    string    `json:"estimated_effort"`
	ExpectedBenefit    string    `json:"expected_benefit"`
	Timestamp          time.Time `json:"timestamp"`
}

SecurityRecommendation represents security recommendations

type SecurityRule

type SecurityRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Severity  string
	Action    string
	Enabled   bool
}

type SessionActivity

type SessionActivity struct {
	ActivityID   string
	ActivityType string
	Timestamp    time.Time
	Details      map[string]interface{}
	Duration     time.Duration
}

type SessionAnalytics

type SessionAnalytics struct {
	// contains filtered or unexported fields
}

type SessionAuthenticationValidator

type SessionAuthenticationValidator struct {
	// contains filtered or unexported fields
}

type SessionMetric

type SessionMetric struct {
	MetricID   string
	SessionID  string
	MetricType string
	Value      float64
	Timestamp  time.Time
	Unit       string
}

type SessionMonitor

type SessionMonitor struct {
	// contains filtered or unexported fields
}

type SessionRecord

type SessionRecord struct {
	RecordID  string
	SessionID string
	UserID    string
	Timestamp time.Time
	Summary   string
	Metrics   map[string]float64
}

type SessionReport

type SessionReport struct {
	ReportID       string
	SessionID      string
	GenerationTime time.Time
	Content        string
	Format         string
	Metadata       map[string]interface{}
}

type SessionReportGenerator

type SessionReportGenerator struct {
	// contains filtered or unexported fields
}

type SessionRule

type SessionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type SessionSecurityAnalyzer

type SessionSecurityAnalyzer struct {
	// contains filtered or unexported fields
}

type SessionSecurityRule

type SessionSecurityRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type SessionThreat

type SessionThreat struct {
	ThreatID      string
	SessionID     string
	ThreatType    string
	DetectionTime time.Time
	Severity      string
	Evidence      []string
}

type SessionThreatDetectionRule

type SessionThreatDetectionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type SessionThreatDetector

type SessionThreatDetector struct {
	// contains filtered or unexported fields
}

type SessionThreatPattern

type SessionThreatPattern struct {
	PatternID  string
	ThreatType string
	Indicators []string
	RiskLevel  string
}

type SocialEngineeringDetector

type SocialEngineeringDetector struct {
	// contains filtered or unexported fields
}

Social engineering detection structures

func NewSocialEngineeringDetector

func NewSocialEngineeringDetector() *SocialEngineeringDetector

type SocialEngineeringRisk

type SocialEngineeringRisk struct {
	RiskLevel             string                 `json:"risk_level"`
	ConfidenceScore       float64                `json:"confidence_score"`
	DetectedTechniques    []string               `json:"detected_techniques"`
	PsychologicalTriggers []PsychologicalTrigger `json:"psychological_triggers"`
	ManipulationTactics   []ManipulationTactic   `json:"manipulation_tactics"`
}

SocialEngineeringRisk represents social engineering risk assessment

type SpatialAnalyzer

type SpatialAnalyzer struct {
	// contains filtered or unexported fields
}

type SpatialCorrelation

type SpatialCorrelation struct {
	GeographicRegion    string   `json:"geographic_region"`
	AttackDensity       float64  `json:"attack_density"`
	CorrelationStrength float64  `json:"correlation_strength"`
	AffectedEcosystems  []string `json:"affected_ecosystems"`
}

SpatialCorrelation represents spatial attack correlations

type StabilityMetric

type StabilityMetric struct {
	MetricType string
	Threshold  float64
	Weight     float64
}

type StabilityMetrics

type StabilityMetrics struct {
	PredictionVariance float64 `json:"prediction_variance"`
	OutputStability    float64 `json:"output_stability"`
	FeatureSensitivity float64 `json:"feature_sensitivity"`
	NoiseResistance    float64 `json:"noise_resistance"`
}

StabilityMetrics represents model stability metrics

type StageDetector

type StageDetector struct {
	// contains filtered or unexported fields
}

type StageSignature

type StageSignature struct {
	StageID    string
	StageName  string
	Indicators []string
	Duration   time.Duration
	Confidence float64
}

type StagedAttack

type StagedAttack struct {
	AttackID     string        `json:"attack_id"`
	Stages       []AttackStage `json:"stages"`
	CurrentStage int           `json:"current_stage"`
	Progression  float64       `json:"progression"`
	NextStageETA *time.Time    `json:"next_stage_eta"`
}

StagedAttack represents staged attack sequences

type Stakeholder

type Stakeholder struct {
	StakeholderID string
	Name          string
	Role          string
	ContactInfo   map[string]string
	Availability  []TimeWindow
}

type StatisticalAnomaly

type StatisticalAnomaly struct {
	AnomalyID     string  `json:"anomaly_id"`
	Metric        string  `json:"metric"`
	ObservedValue float64 `json:"observed_value"`
	ExpectedValue float64 `json:"expected_value"`
	Deviation     float64 `json:"deviation"`
	ZScore        float64 `json:"z_score"`
	Probability   float64 `json:"probability"`
}

StatisticalAnomaly represents statistical anomalies

type StrengthMetric

type StrengthMetric struct {
	MetricID    string
	MetricType  string
	Value       float64
	Weight      float64
	Description string
}

type StrengthRule

type StrengthRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Weight    float64
	Enabled   bool
}

type SupplyChainAnalyzer

type SupplyChainAnalyzer struct {
	// contains filtered or unexported fields
}

type SupplyChainRisk

type SupplyChainRisk struct {
	RiskType      string   `json:"risk_type"`
	RiskLevel     string   `json:"risk_level"`
	AffectedChain []string `json:"affected_chain"`
	ImpactRadius  int      `json:"impact_radius"`
	Mitigation    []string `json:"mitigation"`
}

SupplyChainRisk represents supply chain risks

type SuspiciousChange

type SuspiciousChange struct {
	FromVersion string   `json:"from_version"`
	ToVersion   string   `json:"to_version"`
	ChangeType  string   `json:"change_type"`
	Suspicion   float64  `json:"suspicion"`
	Indicators  []string `json:"indicators"`
}

SuspiciousChange represents a suspicious change across versions

type SuspiciousDomain

type SuspiciousDomain struct {
	Domain         string    `json:"domain"`
	SuspicionLevel string    `json:"suspicion_level"`
	SuspicionScore float64   `json:"suspicion_score"`
	Reasons        []string  `json:"reasons"`
	FirstSeen      time.Time `json:"first_seen"`
	LastSeen       time.Time `json:"last_seen"`
	ThreatType     string    `json:"threat_type"`
}

SuspiciousDomain represents suspicious domains

type SuspiciousGradient

type SuspiciousGradient struct {
	LayerName     string  `json:"layer_name"`
	GradientValue float64 `json:"gradient_value"`
	AnomalyScore  float64 `json:"anomaly_score"`
	Description   string  `json:"description"`
}

SuspiciousGradient represents suspicious gradient patterns

type SuspiciousPattern

type SuspiciousPattern struct {
	PatternID      string    `json:"pattern_id"`
	SuspicionLevel string    `json:"suspicion_level"`
	SuspicionScore float64   `json:"suspicion_score"`
	Reasons        []string  `json:"reasons"`
	Evidence       []string  `json:"evidence"`
	FirstDetected  time.Time `json:"first_detected"`
	Persistence    bool      `json:"persistence"`
}

SuspiciousPattern represents suspicious behavioral patterns

type SuspiciousUser

type SuspiciousUser struct {
	UserID            string    `json:"user_id"`
	SuspicionLevel    string    `json:"suspicion_level"`
	SuspicionScore    float64   `json:"suspicion_score"`
	SuspiciousActions []string  `json:"suspicious_actions"`
	FirstSeen         time.Time `json:"first_seen"`
	LastSeen          time.Time `json:"last_seen"`
	BotProbability    float64   `json:"bot_probability"`
}

SuspiciousUser represents suspicious users

type SynchronizedEvent

type SynchronizedEvent struct {
	EventType   string    `json:"event_type"`
	Timestamp   time.Time `json:"timestamp"`
	Ecosystem   string    `json:"ecosystem"`
	PackageName string    `json:"package_name"`
	Severity    string    `json:"severity"`
}

SynchronizedEvent represents synchronized attack events

type TamperingDetection

type TamperingDetection struct {
	TamperingEvents     []TamperingEvent     `json:"tampering_events"`
	TamperingPatterns   []TamperingPattern   `json:"tampering_patterns"`
	TamperingIndicators []TamperingIndicator `json:"tampering_indicators"`
	TamperingRisk       string               `json:"tampering_risk"`
}

TamperingDetection represents tampering detection

type TamperingEvent

type TamperingEvent struct {
	EventID         string    `json:"event_id"`
	EventType       string    `json:"event_type"`
	DetectionTime   time.Time `json:"detection_time"`
	FilePath        string    `json:"file_path"`
	TamperingMethod string    `json:"tampering_method"`
	Evidence        []string  `json:"evidence"`
	Severity        string    `json:"severity"`
}

TamperingEvent represents tampering events

type TamperingIndicator

type TamperingIndicator struct {
	IndicatorID   string   `json:"indicator_id"`
	IndicatorType string   `json:"indicator_type"`
	Description   string   `json:"description"`
	Confidence    float64  `json:"confidence"`
	Evidence      []string `json:"evidence"`
	RiskLevel     string   `json:"risk_level"`
}

TamperingIndicator represents tampering indicators

type TamperingPattern

type TamperingPattern struct {
	PatternID     string   `json:"pattern_id"`
	PatternType   string   `json:"pattern_type"`
	Description   string   `json:"description"`
	Frequency     int      `json:"frequency"`
	AffectedFiles []string `json:"affected_files"`
	Methods       []string `json:"methods"`
}

TamperingPattern represents tampering patterns

type TechnicalAnalyzer

type TechnicalAnalyzer struct {
	// contains filtered or unexported fields
}

type TechnicalCorrelation

type TechnicalCorrelation struct {
	TechnicalIndicator  string   `json:"technical_indicator"`
	IndicatorType       string   `json:"indicator_type"`
	CorrelationStrength float64  `json:"correlation_strength"`
	AffectedPackages    []string `json:"affected_packages"`
	AttackTechniques    []string `json:"attack_techniques"`
}

TechnicalCorrelation represents technical attack correlations

type TemporalAnalysisResult

type TemporalAnalysisResult struct {
	TemporalPatterns  []TemporalPattern `json:"temporal_patterns"`
	SeasonalPatterns  []SeasonalPattern `json:"seasonal_patterns"`
	CyclicalPatterns  []CyclicalPattern `json:"cyclical_patterns"`
	TemporalAnomalies []TemporalAnomaly `json:"temporal_anomalies"`
	TrendAnalysis     *TrendAnalysis    `json:"trend_analysis"`
	ForecastAnalysis  *ForecastAnalysis `json:"forecast_analysis"`
}

TemporalAnalysisResult represents temporal analysis results

type TemporalAnalyzer

type TemporalAnalyzer struct {
	// contains filtered or unexported fields
}

type TemporalAnomaly

type TemporalAnomaly struct {
	AnomalyID     string    `json:"anomaly_id"`
	AnomalyType   string    `json:"anomaly_type"`
	DetectionTime time.Time `json:"detection_time"`
	TimeFrame     string    `json:"time_frame"`
	Description   string    `json:"description"`
	Deviation     float64   `json:"deviation"`
	Significance  float64   `json:"significance"`
	Evidence      []string  `json:"evidence"`
}

TemporalAnomaly represents temporal anomalies

type TemporalAnomalyDetector

type TemporalAnomalyDetector struct {
	// contains filtered or unexported fields
}

type TemporalAnomalyRecord

type TemporalAnomalyRecord struct {
	RecordID        string
	AnomalyID       string
	Timestamp       time.Time
	Characteristics map[string]interface{}
	Severity        string
}

type TemporalAnomalyRule

type TemporalAnomalyRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type TemporalBehaviorAnalyzer

type TemporalBehaviorAnalyzer struct {
	// contains filtered or unexported fields
}

type TemporalCorrelation

type TemporalCorrelation struct {
	TimeWindow         time.Duration       `json:"time_window"`
	AttackCount        int                 `json:"attack_count"`
	CorrelationScore   float64             `json:"correlation_score"`
	SynchronizedEvents []SynchronizedEvent `json:"synchronized_events"`
}

TemporalCorrelation represents temporal attack correlations

type TemporalDetector

type TemporalDetector struct {
	// contains filtered or unexported fields
}

TemporalDetector provides advanced temporal threat detection capabilities Addresses critical vulnerabilities identified in adversarial assessment: - Time-bomb malware with extended delays (18+ months) - Astronomical event triggers - Seasonal activation patterns - Gradual payload deployment across versions

func NewTemporalDetector

func NewTemporalDetector(config *TemporalDetectorConfig, logger logger.Logger) *TemporalDetector

NewTemporalDetector creates a new temporal detector

func (*TemporalDetector) AnalyzeTemporalThreats

func (td *TemporalDetector) AnalyzeTemporalThreats(ctx context.Context, pkg *types.Package) (*TemporalThreat, error)

AnalyzeTemporalThreats performs comprehensive temporal threat analysis

type TemporalDetectorConfig

type TemporalDetectorConfig struct {
	MaxAnalysisWindow     time.Duration `yaml:"max_analysis_window"`     // 24 months
	SuspicionThreshold    float64       `yaml:"suspicion_threshold"`     // 0.7
	VersionTrackingDepth  int           `yaml:"version_tracking_depth"`  // 50 versions
	AstronomicalChecks    bool          `yaml:"astronomical_checks"`     // true
	SeasonalAnalysis      bool          `yaml:"seasonal_analysis"`       // true
	GradualDeploymentScan bool          `yaml:"gradual_deployment_scan"` // true
	Enabled               bool          `yaml:"enabled"`                 // true
}

TemporalDetectorConfig configures temporal detection parameters

func DefaultTemporalDetectorConfig

func DefaultTemporalDetectorConfig() *TemporalDetectorConfig

DefaultTemporalDetectorConfig returns default configuration

type TemporalInstallation

type TemporalInstallation struct {
	TimeWindow        string  `json:"time_window"`
	InstallationCount int     `json:"installation_count"`
	Rate              float64 `json:"rate"`
	Trend             string  `json:"trend"`
	Anomalous         bool    `json:"anomalous"`
}

TemporalInstallation represents temporal installation data

type TemporalInstallationAnalyzer

type TemporalInstallationAnalyzer struct {
	// contains filtered or unexported fields
}

type TemporalInstallationPattern

type TemporalInstallationPattern struct {
	PatternID  string
	TimeWindow time.Duration
	Pattern    string
	Frequency  int
	Anomalous  bool
}

type TemporalMonitor

type TemporalMonitor struct {
	// contains filtered or unexported fields
}

type TemporalPattern

type TemporalPattern struct {
	Name        string
	Pattern     *regexp.Regexp
	Severity    types.Severity
	Description string
	Indicators  []string
}

TemporalPattern represents suspicious temporal patterns

type TemporalPatternAnalyzer

type TemporalPatternAnalyzer struct {
	// contains filtered or unexported fields
}

type TemporalPatternRule

type TemporalPatternRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type TemporalRule

type TemporalRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type TemporalThreat

type TemporalThreat struct {
	ThreatID          string                 `json:"threat_id"`
	PackageName       string                 `json:"package_name"`
	ThreatType        string                 `json:"threat_type"`
	Severity          types.Severity         `json:"severity"`
	ConfidenceScore   float64                `json:"confidence_score"`
	DetectedPatterns  []string               `json:"detected_patterns"`
	PredictedTriggers []PredictedTrigger     `json:"predicted_triggers"`
	VersionAnalysis   *VersionAnalysisResult `json:"version_analysis"`
	Recommendations   []string               `json:"recommendations"`
	Metadata          map[string]interface{} `json:"metadata"`
}

TemporalThreat represents a detected temporal threat

type TemporalTrend

type TemporalTrend struct {
	TrendID    string
	TrendType  string
	Direction  string
	Magnitude  float64
	Confidence float64
	TimeFrame  time.Duration
}

type TemporalTrendAnalyzer

type TemporalTrendAnalyzer struct {
	// contains filtered or unexported fields
}

type TemporalTrendRule

type TemporalTrendRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type ThreatActor

type ThreatActor struct {
	ActorID      string    `json:"actor_id"`
	ActorName    string    `json:"actor_name"`
	ThreatLevel  string    `json:"threat_level"`
	Capabilities []string  `json:"capabilities"`
	KnownTTPs    []string  `json:"known_ttps"`
	LastActivity time.Time `json:"last_activity"`
	Attribution  float64   `json:"attribution"`
}

ThreatActor represents identified threat actors

type ThreatDetectionRule

type ThreatDetectionRule struct {
	RuleID     string
	ThreatType string
	Condition  string
	Confidence float64
	Action     string
}

type ThreatDetector

type ThreatDetector struct {
	// contains filtered or unexported fields
}

type ThreatEvent

type ThreatEvent struct {
	EventID     string    `json:"event_id"`
	EventType   string    `json:"event_type"`
	Timestamp   time.Time `json:"timestamp"`
	Description string    `json:"description"`
	Severity    string    `json:"severity"`
	Indicators  []string  `json:"indicators"`
}

ThreatEvent represents threat timeline events

type ThreatFeed

type ThreatFeed struct {
	FeedID      string    `json:"feed_id"`
	FeedName    string    `json:"feed_name"`
	FeedURL     string    `json:"feed_url"`
	FeedType    string    `json:"feed_type"`
	LastUpdate  time.Time `json:"last_update"`
	RecordCount int       `json:"record_count"`
	Enabled     bool      `json:"enabled"`
}

ThreatFeed represents threat intelligence feeds

type ThreatIndicator

type ThreatIndicator struct {
	IndicatorType  string    `json:"indicator_type"`
	IndicatorValue string    `json:"indicator_value"`
	Confidence     float64   `json:"confidence"`
	ThreatLevel    string    `json:"threat_level"`
	FirstSeen      time.Time `json:"first_seen"`
	LastSeen       time.Time `json:"last_seen"`
	Sources        []string  `json:"sources"`
}

ThreatIndicator represents threat indicators

type ThreatIntelRecord

type ThreatIntelRecord struct {
	RecordID      string                 `json:"record_id"`
	ThreatType    string                 `json:"threat_type"`
	Indicator     string                 `json:"indicator"`
	IndicatorType string                 `json:"indicator_type"`
	Confidence    float64                `json:"confidence"`
	Severity      string                 `json:"severity"`
	Description   string                 `json:"description"`
	Source        string                 `json:"source"`
	FirstSeen     time.Time              `json:"first_seen"`
	LastSeen      time.Time              `json:"last_seen"`
	Tags          []string               `json:"tags"`
	Context       map[string]interface{} `json:"context"`
}

ThreatIntelRecord represents threat intelligence records

type ThreatIntelResult

type ThreatIntelResult struct {
	MatchedThreats      []ThreatMatch `json:"matched_threats"`
	ThreatScore         float64       `json:"threat_score"`
	IntelligenceSources []string      `json:"intelligence_sources"`
	LastUpdate          time.Time     `json:"last_update"`
	Recommendations     []string      `json:"recommendations"`
}

ThreatIntelResult represents threat intelligence analysis results

type ThreatIntelligence

type ThreatIntelligence struct {
	// contains filtered or unexported fields
}

func NewThreatIntelligence

func NewThreatIntelligence() *ThreatIntelligence

type ThreatIntelligenceResult

type ThreatIntelligenceResult struct {
	IntelligenceScore   float64              `json:"intelligence_score"`
	ThreatActors        []ThreatActor        `json:"threat_actors"`
	AttackCampaigns     []AttackCampaign     `json:"attack_campaigns"`
	ThreatIndicators    []ThreatIndicator    `json:"threat_indicators"`
	AttributionAnalysis *AttributionAnalysis `json:"attribution_analysis"`
}

ThreatIntelligenceResult represents threat intelligence analysis

type ThreatIntelligenceService

type ThreatIntelligenceService struct {
	// contains filtered or unexported fields
}

ThreatIntelligenceService provides threat intelligence capabilities

type ThreatMatch

type ThreatMatch struct {
	ThreatRecord    ThreatIntelRecord `json:"threat_record"`
	MatchType       string            `json:"match_type"`
	MatchConfidence float64           `json:"match_confidence"`
	MatchedValue    string            `json:"matched_value"`
}

ThreatMatch represents matched threat intelligence

type ThreatMetric

type ThreatMetric struct {
	MetricID       string  `json:"metric_id"`
	ThreatType     string  `json:"threat_type"`
	DetectionCount int     `json:"detection_count"`
	FalsePositives int     `json:"false_positives"`
	TruePositives  int     `json:"true_positives"`
	Accuracy       float64 `json:"accuracy"`
}

ThreatMetric represents threat metrics

type ThreatModel

type ThreatModel struct {
	ModelID        string
	ThreatType     string
	DetectionLogic string
	Accuracy       float64
	LastUpdated    time.Time
}

type ThreatPropagationModel

type ThreatPropagationModel struct {
	// contains filtered or unexported fields
}

type ThreatRecord

type ThreatRecord struct {
	ThreatID   string
	ThreatType string
	Timestamp  time.Time
	Severity   string
	Evidence   []string
	Status     string
}

type TimeSeriesPoint

type TimeSeriesPoint struct {
	Timestamp time.Time
	Value     float64
	Metadata  map[string]interface{}
}

type TimeWindow

type TimeWindow struct {
	Start    time.Time
	End      time.Time
	Timezone string
}

type TokenExpirationManager

type TokenExpirationManager struct {
	// contains filtered or unexported fields
}

type TokenValidationRule

type TokenValidationRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type TokenValidator

type TokenValidator struct {
	// contains filtered or unexported fields
}

type TrafficAnalysis

type TrafficAnalysis struct {
	TotalTraffic        int64              `json:"total_traffic"`
	InboundTraffic      int64              `json:"inbound_traffic"`
	OutboundTraffic     int64              `json:"outbound_traffic"`
	TrafficRate         float64            `json:"traffic_rate"`
	PeakTrafficTime     time.Time          `json:"peak_traffic_time"`
	TrafficDistribution map[string]float64 `json:"traffic_distribution"`
	UnusualTraffic      bool               `json:"unusual_traffic"`
}

TrafficAnalysis represents traffic analysis

type TrafficAnalyzer

type TrafficAnalyzer struct {
	// contains filtered or unexported fields
}

type TrafficAnomaly

type TrafficAnomaly struct {
	AnomalyID     string
	AnomalyType   string
	DetectionTime time.Time
	Severity      string
	Evidence      []string
}

type TrafficAnomalyDetector

type TrafficAnomalyDetector struct {
	// contains filtered or unexported fields
}

type TrafficAnomalyModel

type TrafficAnomalyModel struct {
	ModelID     string
	ModelType   string
	Parameters  map[string]interface{}
	Sensitivity float64
}

type TrafficMetric

type TrafficMetric struct {
	MetricID   string
	MetricType string
	Value      float64
	Timestamp  time.Time
	Direction  string
}

type TrafficPattern

type TrafficPattern struct {
	PatternID       string
	PatternType     string
	Characteristics map[string]interface{}
	Frequency       int
	Normal          bool
}

type TrainingDataPoint

type TrainingDataPoint struct {
	Features  map[string]float64
	Label     string
	Timestamp time.Time
	Weight    float64
}

type TransitionRule

type TransitionRule struct {
	FromStage   string
	ToStage     string
	Conditions  []string
	Probability float64
}

type TrendAnalysis

type TrendAnalysis struct {
	OverallTrend    string           `json:"overall_trend"`
	TrendDirection  string           `json:"trend_direction"`
	TrendStrength   float64          `json:"trend_strength"`
	TrendStability  float64          `json:"trend_stability"`
	ChangePoints    []ChangePoint    `json:"change_points"`
	TrendComponents []TrendComponent `json:"trend_components"`
}

TrendAnalysis represents trend analysis

type TrendComponent

type TrendComponent struct {
	ComponentID   string  `json:"component_id"`
	ComponentType string  `json:"component_type"`
	Description   string  `json:"description"`
	Contribution  float64 `json:"contribution"`
	Significance  float64 `json:"significance"`
}

TrendComponent represents trend components

type TrendRecord

type TrendRecord struct {
	RecordID        string
	TrendID         string
	Timestamp       time.Time
	Characteristics map[string]interface{}
	Confidence      float64
}

type TrustFactor

type TrustFactor struct {
	Factor      string   `json:"factor"`
	Weight      float64  `json:"weight"`
	Score       float64  `json:"score"`
	Evidence    []string `json:"evidence"`
	Reliability string   `json:"reliability"`
}

TrustFactor represents factors contributing to trust

type TrustValidationResult

type TrustValidationResult struct {
	PackageName           string                      `json:"package_name"`
	OverallTrustScore     float64                     `json:"overall_trust_score"`
	SuspicionScore        float64                     `json:"suspicion_score"`
	TrustLevel            string                      `json:"trust_level"`
	ValidationResults     map[string]ValidationResult `json:"validation_results"`
	SocialEngineeringRisk *SocialEngineeringRisk      `json:"social_engineering_risk"`
	TrustFactors          []TrustFactor               `json:"trust_factors"`
	RedFlags              []RedFlag                   `json:"red_flags"`
	Recommendations       []string                    `json:"recommendations"`
	Metadata              map[string]interface{}      `json:"metadata"`
}

TrustValidationResult represents trust validation results

type TrustValidator

type TrustValidator struct {
	// contains filtered or unexported fields
}

TrustValidator provides comprehensive trust validation capabilities Addresses critical vulnerabilities identified in adversarial assessment: - Authority impersonation (federal security directive) - Maintainer reputation hijacking (emergency patch) - Corporate backing fabrication (enterprise security mandate) - Security researcher impersonation (vulnerability fix) - Compliance certification forgery (ISO certified framework) - Community manipulation (grassroots endorsed tool)

func NewTrustValidator

func NewTrustValidator(config *TrustValidatorConfig, logger logger.Logger) *TrustValidator

NewTrustValidator creates a new trust validator

func (*TrustValidator) ValidateTrust

func (tv *TrustValidator) ValidateTrust(ctx context.Context, pkg *types.Package) (*TrustValidationResult, error)

ValidateTrust performs comprehensive trust validation

type TrustValidatorConfig

type TrustValidatorConfig struct {
	EnableAuthorityValidation  bool          `yaml:"enable_authority_validation"`  // true
	EnableMaintainerValidation bool          `yaml:"enable_maintainer_validation"` // true
	EnableCorporateValidation  bool          `yaml:"enable_corporate_validation"`  // true
	EnableResearcherValidation bool          `yaml:"enable_researcher_validation"` // true
	EnableComplianceValidation bool          `yaml:"enable_compliance_validation"` // true
	EnableCommunityValidation  bool          `yaml:"enable_community_validation"`  // true
	EnableSocialEngineering    bool          `yaml:"enable_social_engineering"`    // true
	TrustThreshold             float64       `yaml:"trust_threshold"`              // 0.7
	SuspicionThreshold         float64       `yaml:"suspicion_threshold"`          // 0.3
	ValidationTimeout          time.Duration `yaml:"validation_timeout"`           // 30s
	RequireMultipleValidation  bool          `yaml:"require_multiple_validation"`  // true
	ZeroTrustMode              bool          `yaml:"zero_trust_mode"`              // false
	Enabled                    bool          `yaml:"enabled"`                      // true
}

TrustValidatorConfig configures trust validation parameters

func DefaultTrustValidatorConfig

func DefaultTrustValidatorConfig() *TrustValidatorConfig

DefaultTrustValidatorConfig returns default configuration

type UnusualPermission

type UnusualPermission struct {
	FilePath        string   `json:"file_path"`
	Permissions     string   `json:"permissions"`
	UnusualAspect   string   `json:"unusual_aspect"`
	RiskLevel       string   `json:"risk_level"`
	Recommendations []string `json:"recommendations"`
}

UnusualPermission represents unusual permissions

type UpdateRecord

type UpdateRecord struct {
	RecordID   string
	BaselineID string
	UpdateTime time.Time
	UpdateType string
	Changes    map[string]interface{}
	Success    bool
}

type UpdateRule

type UpdateRule struct {
	RuleID          string
	BaselineType    string
	UpdateFrequency time.Duration
	UpdateCondition string
	Enabled         bool
}

type UserAction

type UserAction struct {
	ActionID    string                 `json:"action_id"`
	ActionType  string                 `json:"action_type"`
	Timestamp   time.Time              `json:"timestamp"`
	Description string                 `json:"description"`
	Context     map[string]interface{} `json:"context"`
	Result      string                 `json:"result"`
	Suspicious  bool                   `json:"suspicious"`
}

UserAction represents user actions

type UserAnalyzer

type UserAnalyzer struct {
	// contains filtered or unexported fields
}

type UserAnomaly

type UserAnomaly struct {
	AnomalyID     string
	UserID        string
	AnomalyType   string
	DetectionTime time.Time
	Severity      string
	Evidence      []string
}

type UserAnomalyDetector

type UserAnomalyDetector struct {
	// contains filtered or unexported fields
}

type UserAnomalyModel

type UserAnomalyModel struct {
	ModelID     string
	ModelType   string
	Parameters  map[string]interface{}
	Sensitivity float64
}

type UserAuthenticationAnalyzer

type UserAuthenticationAnalyzer struct {
	// contains filtered or unexported fields
}

type UserBehaviorAnalysis

type UserBehaviorAnalysis struct {
	UserTypes        []UserType            `json:"user_types"`
	BehaviorPatterns []UserBehaviorPattern `json:"behavior_patterns"`
	SuspiciousUsers  []SuspiciousUser      `json:"suspicious_users"`
	UserEngagement   *UserEngagement       `json:"user_engagement"`
}

UserBehaviorAnalysis represents user behavior analysis

type UserBehaviorAnalyzer

type UserBehaviorAnalyzer struct {
	// contains filtered or unexported fields
}

type UserBehaviorModel

type UserBehaviorModel struct {
	ModelID      string
	BehaviorType string
	Parameters   map[string]interface{}
	Accuracy     float64
}

type UserBehaviorPattern

type UserBehaviorPattern struct {
	PatternID      string   `json:"pattern_id"`
	PatternName    string   `json:"pattern_name"`
	UserCount      int      `json:"user_count"`
	Frequency      float64  `json:"frequency"`
	Typical        bool     `json:"typical"`
	RiskIndicators []string `json:"risk_indicators"`
}

UserBehaviorPattern represents user behavior patterns

type UserBehaviorProfile

type UserBehaviorProfile struct {
	UserID                  string    `json:"user_id"`
	ProfileType             string    `json:"profile_type"`
	BehaviorCharacteristics []string  `json:"behavior_characteristics"`
	TypicalPatterns         []string  `json:"typical_patterns"`
	RiskLevel               string    `json:"risk_level"`
	LastUpdated             time.Time `json:"last_updated"`
	Confidence              float64   `json:"confidence"`
}

UserBehaviorProfile represents user behavior profiles

type UserCredential

type UserCredential struct {
	CredentialID   string
	UserID         string
	CredentialType string
	Hash           string
	Salt           string
	CreationTime   time.Time
	LastUsed       time.Time
	Status         string
}

type UserEngagement

type UserEngagement struct {
	ActiveUsers        int           `json:"active_users"`
	EngagementRate     float64       `json:"engagement_rate"`
	AverageSessionTime time.Duration `json:"average_session_time"`
	ReturnUserRate     float64       `json:"return_user_rate"`
	EngagementTrend    string        `json:"engagement_trend"`
}

UserEngagement represents user engagement metrics

type UserInteraction

type UserInteraction struct {
	InteractionID   string
	UserID          string
	InteractionType string
	Timestamp       time.Time
	Details         map[string]interface{}
	Context         string
}

type UserInteractionAnalysisResult

type UserInteractionAnalysisResult struct {
	InteractionPatterns  []InteractionPattern `json:"interaction_patterns"`
	UserSessions         []UserSession        `json:"user_sessions"`
	InteractionAnomalies []InteractionAnomaly `json:"interaction_anomalies"`
	UserBehaviorProfile  *UserBehaviorProfile `json:"user_behavior_profile"`
	EngagementMetrics    *EngagementMetrics   `json:"engagement_metrics"`
}

UserInteractionAnalysisResult represents user interaction analysis results

type UserInteractionAnalyzer

type UserInteractionAnalyzer struct {
	// contains filtered or unexported fields
}

type UserInteractionMonitor

type UserInteractionMonitor struct {
	// contains filtered or unexported fields
}

type UserProfile

type UserProfile struct {
	UserID          string
	UserType        string
	Characteristics map[string]interface{}
	RiskLevel       string
	LastActivity    time.Time
}

type UserProfileManager

type UserProfileManager struct {
	// contains filtered or unexported fields
}

type UserSession

type UserSession struct {
	SessionID  string        `json:"session_id"`
	UserID     string        `json:"user_id"`
	StartTime  time.Time     `json:"start_time"`
	EndTime    *time.Time    `json:"end_time"`
	Duration   time.Duration `json:"duration"`
	Actions    []UserAction  `json:"actions"`
	Suspicious bool          `json:"suspicious"`
}

UserSession represents user sessions

type UserSessionAnalyzer

type UserSessionAnalyzer struct {
	// contains filtered or unexported fields
}

type UserType

type UserType struct {
	TypeID          string   `json:"type_id"`
	TypeName        string   `json:"type_name"`
	Percentage      float64  `json:"percentage"`
	Characteristics []string `json:"characteristics"`
	RiskLevel       string   `json:"risk_level"`
}

UserType represents user types

type ValidationMetrics

type ValidationMetrics struct {
	TotalInputs     int     `json:"total_inputs"`
	ValidInputs     int     `json:"valid_inputs"`
	AnomalousInputs int     `json:"anomalous_inputs"`
	ValidationRate  float64 `json:"validation_rate"`
	AnomalyRate     float64 `json:"anomaly_rate"`
}

ValidationMetrics represents input validation metrics

type ValidationResult

type ValidationResult struct {
	ValidationType string    `json:"validation_type"`
	Score          float64   `json:"score"`
	Confidence     float64   `json:"confidence"`
	Status         string    `json:"status"`
	Evidence       []string  `json:"evidence"`
	Warnings       []string  `json:"warnings"`
	Timestamp      time.Time `json:"timestamp"`
}

ValidationResult represents individual validation results

type ValidationRule

type ValidationRule struct {
	RuleType  string
	Pattern   string
	Threshold float64
	Action    string
}

type VerificationMethod

type VerificationMethod struct {
	MethodID   string
	MethodType string
	Algorithm  string
	Parameters map[string]interface{}
}

type VersionAnalysisResult

type VersionAnalysisResult struct {
	TotalVersions      int                  `json:"total_versions"`
	SuspiciousVersions int                  `json:"suspicious_versions"`
	GradualDeployment  bool                 `json:"gradual_deployment"`
	PayloadAssembly    bool                 `json:"payload_assembly"`
	VersionProgression []VersionProgression `json:"version_progression"`
	SuspiciousChanges  []SuspiciousChange   `json:"suspicious_changes"`
}

VersionAnalysisResult represents version analysis results

type VersionEntry

type VersionEntry struct {
	Version     string
	ReleaseDate time.Time
	CodeHash    string
	Suspicious  bool
	Changes     []CodeChange
}

VersionEntry represents a package version entry

type VersionProgression

type VersionProgression struct {
	Version    string    `json:"version"`
	Date       time.Time `json:"date"`
	Suspicion  float64   `json:"suspicion"`
	Changes    int       `json:"changes"`
	Indicators []string  `json:"indicators"`
}

VersionProgression tracks progression across versions

type VersionTracker

type VersionTracker struct {
	// contains filtered or unexported fields
}

VersionTracker tracks package versions for gradual deployment detection

func NewVersionTracker

func NewVersionTracker(maxEntries int) *VersionTracker

Helper functions for version tracking

func (*VersionTracker) GetVersionHistory

func (vt *VersionTracker) GetVersionHistory(packageName string) []VersionEntry

type VulnerabilityScanResult

type VulnerabilityScanResult struct {
	ScanID          string
	ProcessID       string
	ScanTime        time.Time
	Vulnerabilities []ProcessVulnerability
	RiskScore       float64
}

type VulnerabilityScanRule

type VulnerabilityScanRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type WeakEncryption

type WeakEncryption struct {
	Protocol        string   `json:"protocol"`
	Weakness        string   `json:"weakness"`
	RiskLevel       string   `json:"risk_level"`
	Recommendations []string `json:"recommendations"`
}

WeakEncryption represents weak encryption

type WeaknessArea

type WeaknessArea struct {
	Area               string   `json:"area"`
	Severity           string   `json:"severity"`
	Description        string   `json:"description"`
	VulnerabilityScore float64  `json:"vulnerability_score"`
	Recommendations    []string `json:"recommendations"`
}

WeaknessArea represents identified model weakness areas

type WeaknessDetectionRule

type WeaknessDetectionRule struct {
	RuleID    string
	RuleType  string
	Condition string
	Action    string
	Enabled   bool
}

type WeaknessDetector

type WeaknessDetector struct {
	// contains filtered or unexported fields
}

type WeaknessPattern

type WeaknessPattern struct {
	PatternID    string
	WeaknessType string
	Pattern      string
	RiskLevel    string
}

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL