Expand description
Entity Classification System for DDEX Builder
This module provides a comprehensive multi-layer classification system to distinguish between legitimate DDEX entities and malicious attempts. It implements defense against XXE attacks, entity expansion attacks, and other XML-based security threats.
§Features
- Multi-layer entity classification (SafeBuiltin, SafeDdex, CustomLocal, Suspicious, Malicious)
- Recursive depth tracking and expansion ratio calculation
- DDEX-specific entity whitelist from official schemas
- Pattern matching for known attack vectors
- Metrics collection for security monitoring
- Performance-optimized caching system
Structs§
- Classifier
Config - Configuration for entity classification
- Entity
- Entity definition for analysis
- Entity
Classifier - DDEX Entity Classifier
- Entity
Metrics - Security metrics for entity analysis
- Validation
Result - Result of entity chain validation
Enums§
- Attack
Type - Types of XML entity attacks
- Entity
Class - Entity classification levels
Functions§
- create_
entity - Helper function to create an Entity from name and value
- create_
external_ entity - Helper function to create an external entity
- create_
parameter_ entity - Helper function to create a parameter entity