Class: Rack::AI::Features::SecurityScanner

Inherits:
Object
  • Object
show all
Defined in:
lib/rack/ai/features/security_scanner.rb

Instance Attribute Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(config) ⇒ SecurityScanner

Returns a new instance of SecurityScanner.



9
10
11
12
# File 'lib/rack/ai/features/security_scanner.rb', line 9

def initialize(config)
  @name = :security_scanner
  @config = config
end

Instance Attribute Details

#configObject (readonly)

Returns the value of attribute config.



7
8
9
# File 'lib/rack/ai/features/security_scanner.rb', line 7

def config
  @config
end

#nameObject (readonly)

Returns the value of attribute name.



7
8
9
# File 'lib/rack/ai/features/security_scanner.rb', line 7

def name
  @name
end

Instance Method Details

#enabled?Boolean

Returns:

  • (Boolean)


14
15
16
# File 'lib/rack/ai/features/security_scanner.rb', line 14

def enabled?
  @config.feature_enabled?(:security_scanner)
end

#process_request(env) ⇒ Object



22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# File 'lib/rack/ai/features/security_scanner.rb', line 22

def process_request(env)
  return { processed: false, reason: "disabled" } unless enabled?

  threats = []
  risk_score = 0.0

  # Check for various security threats
  threats.concat(check_sql_injection(env))
  threats.concat(check_xss_attempts(env))
  threats.concat(check_path_traversal(env))
  threats.concat(check_command_injection(env))
  threats.concat(check_suspicious_headers(env))
  threats.concat(check_malicious_user_agents(env))

  # Calculate overall risk score
  risk_score = calculate_risk_score(threats)
  threat_level = determine_threat_level(risk_score)

  {
    processed: true,
    action: determine_action(threat_level),
    threats: threats,
    risk_score: risk_score,
    threat_level: threat_level,
    feature: @name,
    timestamp: Time.now.iso8601
  }
end

#process_response?Boolean

Returns:

  • (Boolean)


18
19
20
# File 'lib/rack/ai/features/security_scanner.rb', line 18

def process_response?
  false
end