Struct AttackPattern 

pub struct AttackPattern {
    pub id: String,
    pub signature: [u8; 32],
    pub category: AttackCategory,
    pub threat_level: ThreatLevel,
    pub action_type: ActionType,
    pub target_patterns: Vec<String>,
    pub keywords: Vec<String>,
    pub timing_signature: Option<TimingSignature>,
    pub triggered_rule: String,
    pub first_seen: u64,
    pub occurrence_count: u64,
    pub confidence: f64,
}

Extracted attack pattern from DenialProof

Fields

id: String

Unique pattern ID

signature: [u8; 32]

Pattern signature (hash of attack characteristics)

category: AttackCategory

Attack category

threat_level: ThreatLevel

Threat level

action_type: ActionType

Action type that was blocked

target_patterns: Vec<String>

Target patterns (file paths, commands, etc.)

keywords: Vec<String>

Keyword triggers found

timing_signature: Option<TimingSignature>

Timing characteristics (for timing attack detection)

triggered_rule: String

Rule that caught this attack

first_seen: u64

First seen timestamp

occurrence_count: u64

Number of times seen

confidence: f64

Confidence score (0.0 - 1.0)

Implementations

impl AttackPattern

pub fn from_denial( denial: &DenialProof, _additional_context: Option<&str>, ) -> Self

Create new attack pattern from denial proof

pub fn matches(&self, other: &AttackPattern) -> bool

Check if this pattern matches another (for deduplication)

Trait Implementations

impl Clone for AttackPattern

fn clone(&self) -> AttackPattern

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AttackPattern

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AttackPattern

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for AttackPattern

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.