Skip to main content

Crate security_rust

Crate security_rust 

Source
Expand description

Rust 编写的攻击检测库:32 个无状态检测器(注入 / 协议 / 数据 / 文件四类)

  • 三个有状态模块(会话安全、限流封禁、风险评分)。[dependencies] 只有 regex。
      (o)(o)
   ⌕┬─────────┬!     甲哨 Sentri
    │ · · · · │       只报告,不拦截
    └──┬───┬──┘       32 detectors / 4 categories
      /     \         deps = regex ×1

项目宠物 甲哨 Sentri:32 片甲是 32 个检测器,左钳的放大镜负责看,右钳的 告示牌负责报,但两只钳子都不替调用方做决定(唯一的例外是 SessionGuard)。形象见 pet 模块。

use security_rust::Scanner;

let results = Scanner::default().scan("<script>alert(1)</script>");
assert_eq!(results[0].attack_type, "xss");

Re-exports§

pub use result::AttackCategory;
pub use result::DetectionResult;
pub use result::Severity;
pub use scanner::Scanner;
pub use scanner::ScannerBuilder;
pub use score::RiskAssessment;
pub use score::RiskLevel;
pub use score::assess;
pub use session::Decision;
pub use session::LoginPoint;
pub use session::MemoryStore;
pub use session::RequestContext;
pub use session::SessionConfig;
pub use session::SessionError;
pub use session::SessionGuard;
pub use session::SessionRecord;
pub use session::SessionStore;
pub use session::SessionThreat;
pub use session::SessionVerdict;
pub use session::StoreError;
pub use throttle::MemoryThrottleStore;
pub use throttle::Throttle;
pub use throttle::ThrottleConfig;
pub use throttle::ThrottleDecision;
pub use throttle::ThrottleOutcome;
pub use throttle::ThrottleStore;

Modules§

data
file
injection
pet
项目宠物:甲哨 Sentri。
protocol
result
scanner
score
session
throttle

Traits§

Detector