security

type Asset struct {
	ID          string
	Type        AssetType
	Name        string
	Value       AssetValue
	Sensitivity DataSensitivity
	Location    string
	Owner       string
}

type AssetType string

type AssetValue string

type AttackVector struct {
	Name            string
	Description     string
	Complexity      Complexity
	Privileges      PrivilegeLevel
	UserInteraction bool
}

type AuthFinding struct {
	Type        AuthFindingType
	Severity    Severity
	Description string
	Evidence    []Evidence
	Location    string
	FoundAt     time.Time
}

type AuthFindingType string

type AuthenticationTest interface {
	TestAuthentication(ctx context.Context, target SecurityTarget) ([]AuthFinding, error)
	TestAuthorization(ctx context.Context, target SecurityTarget) ([]AuthFinding, error)
	TestSessionManagement(ctx context.Context, target SecurityTarget) ([]AuthFinding, error)
}

type CVSSScore struct {
	Version  string
	Vector   string
	Score    float64
	Severity Severity
}

type Complexity string

type ComplianceCheck interface {
	Validate(ctx context.Context, system SystemInfo) (ComplianceResult, error)
	GetStandard() string
	GetRequirements() []Requirement
	GenerateComplianceReport() ComplianceReport
}

type ComplianceLevel string

type ComplianceReport struct {
	Standard  string
	Version   string
	Timestamp time.Time
	Results   []RequirementResult
	Summary   ComplianceSummary
}

type ComplianceResult struct {
	Standard        string
	Compliant       bool
	Score           float64
	Requirements    []RequirementResult
	Violations      []ComplianceViolation
	Recommendations []string
	Timestamp       time.Time
}

type ComplianceStatus string

type ComplianceSummary struct {
	TotalRequirements int
	Passed            int
	Failed            int
	NotApplicable     int
	ComplianceScore   float64
}

type ComplianceViolation struct {
	RequirementID string
	Severity      Severity
	Description   string
	Remediation   string
}

type Cost string

type DataFinding struct {
	Type        DataFindingType
	Severity    Severity
	Description string
	DataType    DataType
	Location    string
	Evidence    []Evidence
	FoundAt     time.Time
}

type DataFindingType string

type DataProtectionTest interface {
	TestEncryption(ctx context.Context, target SecurityTarget) ([]DataFinding, error)
	TestDataLeakage(ctx context.Context, target SecurityTarget) ([]DataFinding, error)
	TestPrivacyCompliance(ctx context.Context, target SecurityTarget) ([]DataFinding, error)
}

type DataSensitivity string

type DataType string

type Effort string

type Evidence struct {
	Type        string
	Description string
	Data        string
	Screenshot  string
	Timestamp   time.Time
}

type HIPAAComplianceChecker struct {
	// contains filtered or unexported fields
}

type Impact string

type ImpactAssessment struct {
	Confidentiality Impact
	Integrity       Impact
	Availability    Impact
	Financial       Impact
	Reputation      Impact
	Legal           Impact
}

type Likelihood string

type Mitigation struct {
	ID            string
	Name          string
	Description   string
	Type          MitigationType
	Effectiveness float64
	Cost          Cost
	Threats       []string // Threat IDs this mitigation addresses
}

type MitigationType string

type OWASPScanner struct {
	// contains filtered or unexported fields
}

type PCIDSSComplianceChecker struct {
	// contains filtered or unexported fields
}

type PenetrationTest interface {
	Execute(ctx context.Context, target SecurityTarget) ([]SecurityFinding, error)
	GetTestType() string
	GetRiskLevel() RiskLevel
	ValidateExploit(finding SecurityFinding) bool
}

type Priority string

type PrivilegeLevel string

type RemediationPlan struct {
	Steps     []RemediationStep
	Priority  Priority
	Effort    Effort
	Timeline  time.Duration
	Resources []string
}

type RemediationStep struct {
	ID          string
	Description string
	Action      string
	Owner       string
	Deadline    time.Time
	Status      StepStatus
}

type ReportFormat string

type Requirement struct {
	ID          string
	Description string
	Category    string
	Mandatory   bool
	TestMethod  string
}

type RequirementResult struct {
	ID          string
	Description string
	Status      ComplianceStatus
	Evidence    []Evidence
	Notes       string
}

type Risk struct {
	ThreatID     string
	AssetID      string
	Likelihood   Likelihood
	Impact       Impact
	RiskLevel    RiskLevel
	Mitigations  []string
	ResidualRisk RiskLevel
}

type RiskLevel string

type RiskMatrix struct {
	Risks []Risk
}

type SOC2ComplianceChecker struct {
	// contains filtered or unexported fields
}

type ScanType string

type SecurityConfig struct {
	MaxScanTime       time.Duration
	ThreatThreshold   Severity
	ComplianceLevel   ComplianceLevel
	EnablePenetration bool
	EnableCompliance  bool
	ReportFormat      ReportFormat
	AlertOnCritical   bool
}

type SecurityContext struct {
	UserAgent   string
	SessionID   string
	RequestID   string
	TenantID    string
	UserID      string
	Permissions []string
	Roles       []string
}

type SecurityCredentials struct {
	Username string
	Password string
	Token    string
	APIKey   string
	Headers  map[string]string
}

type SecurityFinding struct {
	ID          string
	Type        string
	RiskLevel   RiskLevel
	Title       string
	Description string
	Evidence    []Evidence
	Remediation string
	FoundAt     time.Time
}

type SecurityReport struct {
	ScanType        ScanType
	Timestamp       time.Time
	Vulnerabilities []Vulnerability
	Summary         SecurityReportSummary
}

type SecurityReportSummary struct {
	Total    int
	Critical int
	High     int
	Medium   int
	Low      int
}

type SecuritySummary struct {
	TotalVulnerabilities int
	TotalFindings        int
	ComplianceViolations int
	RiskScore            float64
	CriticalIssues       int
	HighIssues           int
	MediumIssues         int
	LowIssues            int
}

type SecurityTarget struct {
	Type        TargetType
	URL         string
	Credentials SecurityCredentials
	Context     SecurityContext
	Assets      []Asset
	ThreatModel ThreatModel
}

type SecurityValidationResult struct {
	Target     SecurityTarget
	StartTime  time.Time
	EndTime    time.Time
	Duration   time.Duration
	Scanners   map[string][]Vulnerability
	PenTests   map[string][]SecurityFinding
	Compliance map[string]ComplianceResult
	Summary    SecuritySummary
	Errors     []string
}

type SecurityValidator struct {
	// contains filtered or unexported fields
}

type Severity string

type StepStatus string

type SystemComponent struct {
	Name    string
	Version string
	Type    string
	Config  map[string]any
}

type SystemInfo struct {
	Target      SecurityTarget
	Timestamp   time.Time
	Environment string
	Version     string
	Components  []SystemComponent
}

type TargetType string

type Threat struct {
	ID          string
	Name        string
	Description string
	Category    ThreatCategory
	Likelihood  Likelihood
	Impact      Impact
	Vectors     []AttackVector
}

type ThreatCategory string

type ThreatModel struct {
	Assets      []Asset
	Threats     []Threat
	Mitigations []Mitigation
	RiskMatrix  RiskMatrix
}

type Vulnerability struct {
	ID          string
	Type        VulnerabilityType
	Severity    Severity
	Title       string
	Description string
	Impact      ImpactAssessment
	Remediation RemediationPlan
	CVSS        CVSSScore
	References  []string
	FoundAt     time.Time
	Location    string
	Evidence    []Evidence
}

type VulnerabilityScanner interface {
	Scan(ctx context.Context, target SecurityTarget) ([]Vulnerability, error)
	GetSeverity(vuln Vulnerability) Severity
	GenerateReport(vulns []Vulnerability) SecurityReport
	GetScanType() ScanType
}

type VulnerabilityType string