Struct Profiler 

pub struct Profiler { /* private fields */ }

Profiler manager for endpoint behavior learning and anomaly detection.

Implementations

impl Profiler

pub fn new(config: ProfilerConfig) -> Self

Create a new profiler with the given configuration.

pub fn is_enabled(&self) -> bool

Check if profiling is enabled.

pub fn get_or_create_profile(&self, template: &str) -> Option<EndpointProfile>

Get or create an endpoint profile.

pub fn update_profile( &self, template: &str, payload_size: usize, params: &[(&str, &str)], content_type: Option<&str>, )

Update an endpoint profile with request data.

Respects the freeze_after_samples setting to prevent model poisoning. If a profile has reached the freeze threshold, updates are silently ignored.

pub fn update_response_profile( &self, template: &str, response_size: usize, status_code: u16, content_type: Option<&str>, )

Update an endpoint profile with response data.

Respects the freeze_after_samples setting to prevent model poisoning.

pub fn get_profiles(&self) -> Vec<EndpointProfile>

Get all profiles.

pub fn get_profile(&self, template: &str) -> Option<EndpointProfile>

Get a specific profile by template.

pub fn profile_count(&self) -> usize

Get the number of profiles.

pub fn learn_schema(&self, template: &str)

Learn schema from a profile if it has enough samples.

pub fn get_schemas(&self) -> Vec<ParameterSchema>

Get all learned schemas.

pub fn get_schema(&self, template: &str) -> Option<ParameterSchema>

Get a specific schema by template.

pub fn schema_count(&self) -> usize

Get the number of schemas.

pub fn reset_profiles(&self)

Reset all profiles (for testing).

pub fn reset_schemas(&self)

Reset all schemas (for testing).

pub fn analyze_request( &self, template: &str, payload_size: usize, params: &[(&str, &str)], content_type: Option<&str>, ) -> AnomalyResult

Analyze a request against the learned profile.

Uses configurable thresholds for anomaly detection and optional PII redaction.

pub fn analyze_response( &self, template: &str, response_size: usize, status_code: u16, content_type: Option<&str>, ) -> AnomalyResult

Analyze a response against the learned profile.

Uses configurable thresholds for response size anomaly detection.

pub fn is_profile_frozen(&self, template: &str) -> bool

Check if a profile is frozen (no longer accepts updates).

Frozen baselines help prevent model poisoning attacks where attackers gradually shift the baseline to make malicious patterns appear normal.

Trait Implementations

impl Debug for Profiler

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.