Struct EndpointProfile 

pub struct EndpointProfile {
    pub template: String,
    pub payload_size: Distribution,
    pub response_size: Distribution,
    pub expected_params: HashMap<String, ParamStats>,
    pub content_types: HashMap<String, u32>,
    pub response_content_types: HashMap<String, u32>,
    pub status_codes: HashMap<u16, u32>,
    pub request_rate: RateTracker,
    pub endpoint_risk: f32,
    pub sample_count: u32,
    pub first_seen_ms: u64,
    pub last_updated_ms: u64,
}

Statistical profile for a single API endpoint.

Memory budget: ~2KB per endpoint

Fields

template: String

Path template (e.g., “/api/users/{id}”)

payload_size: Distribution

Payload size distribution (bytes)

response_size: Distribution

Response size distribution (bytes)

expected_params: HashMap<String, ParamStats>

Expected query parameters (name -> stats) Capped at MAX_PARAMS parameters

content_types: HashMap<String, u32>

Expected content types (type -> frequency count)

response_content_types: HashMap<String, u32>

Expected response content types (type -> frequency count)

status_codes: HashMap<u16, u32>

HTTP status codes (code -> count)

request_rate: RateTracker

Request rate tracker (60-second window)

endpoint_risk: f32

Aggregate endpoint risk score (0.0-100.0) Computed from attack density and vulnerability indicators

sample_count: u32

Total sample count

first_seen_ms: u64

First seen timestamp (ms)

last_updated_ms: u64

Last updated timestamp (ms)

Implementations

impl EndpointProfile

pub fn new(template: String, now_ms: u64) -> Self

Create a new profile for an endpoint template.

pub fn update( &mut self, payload_size: usize, params: &[(&str, &str)], content_type: Option<&str>, now_ms: u64, )

Update profile with request data.

Uses &[(&str, &str)] to pass param name and value.

pub fn update_response( &mut self, response_size: usize, status_code: u16, content_type: Option<&str>, now_ms: u64, )

Update profile with response data.

pub fn record_status(&mut self, status_code: u16)

Record response status code.

pub fn dominant_content_type(&self) -> Option<&str>

Get the dominant content type (most frequent).

pub fn dominant_response_content_type(&self) -> Option<&str>

Get the dominant response content type.

pub fn param_frequency(&self, param: &str) -> f64

Get parameter frequency (0.0-1.0).

pub fn is_expected_param(&self, param: &str, threshold: f64) -> bool

Check if a parameter is “expected” (seen in > threshold of requests).

pub fn status_frequency(&self, status_code: u16) -> f64

Get status code frequency (0.0-1.0).

pub fn error_rate(&self) -> f64

Get the error rate (4xx + 5xx responses).

pub fn baseline_rate(&self, now_ms: u64) -> f64

Calculate baseline request rate (requests per minute over lifetime).

pub fn is_mature(&self, min_samples: u32) -> bool

Check if profile has enough samples for anomaly detection.

pub fn age_ms(&self, now_ms: u64) -> u64

Get the age of this profile in milliseconds.

pub fn idle_ms(&self, now_ms: u64) -> u64

Get time since last update in milliseconds.

Trait Implementations

impl Clone for EndpointProfile

fn clone(&self) -> EndpointProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EndpointProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for EndpointProfile

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for EndpointProfile

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.