Enum AnomalySignalType 

pub enum AnomalySignalType {
    PayloadSizeHigh,
    PayloadSizeLow,
    UnexpectedParam,
    MissingExpectedParam,
    ParamValueAnomaly,
    ContentTypeMismatch,
    RateBurst,
    ParamCountAnomaly,
    HeaderMissingRequired,
    HeaderUnexpected,
    HeaderValueAnomaly,
    HeaderEntropyAnomaly,
    HeaderLengthAnomaly,
    AbnormalErrorRate,
}

Type of anomaly detected in a request.

Variants

PayloadSizeHigh

Payload size significantly above baseline (z-score > 3)

PayloadSizeLow

Payload size suspiciously small for endpoint

UnexpectedParam

Query parameter not seen in baseline

MissingExpectedParam

Usually-present parameter missing

ParamValueAnomaly

Parameter value outside learned range

ContentTypeMismatch

Content-Type doesn’t match baseline

RateBurst

Request rate burst from this entity

ParamCountAnomaly

Too many parameters

HeaderMissingRequired

Required header (seen in >95% of baseline) is missing

HeaderUnexpected

Unexpected header not seen in baseline

HeaderValueAnomaly

Header value is anomalous (unusual pattern, format)

HeaderEntropyAnomaly

Header value entropy is anomalous (z-score > 3 sigma)

HeaderLengthAnomaly

Header value length is outside expected range

AbnormalErrorRate

Abnormal error rate detected (5xx errors on usually-stable endpoint)

Implementations

impl AnomalySignalType

pub fn as_str(&self) -> &'static str

Get the signal type as a string for logging/metrics.

pub fn default_severity(&self) -> u8

Get the default severity for this signal type.

Severity scale (1-10):

• 1-3: Low (informational, minor deviations)
• 4-6: Medium (notable anomalies, worth investigation)
• 7-10: High (likely malicious, strong indicators)

pub fn default_risk(&self) -> u16

Get the default risk contribution for this signal type.

Risk contribution scale (0-50):

• 0-10: Low risk addition
• 11-25: Medium risk addition
• 26-50: High risk addition

Trait Implementations

impl Clone for AnomalySignalType

fn clone(&self) -> AnomalySignalType

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AnomalySignalType

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for AnomalySignalType

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for AnomalySignalType

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for AnomalySignalType

fn eq(&self, other: &AnomalySignalType) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for AnomalySignalType

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for AnomalySignalType

impl Eq for AnomalySignalType

impl StructuralPartialEq for AnomalySignalType