@anonympins/fingerprint 0.6.5 → 0.6.7

package/src/php/Optimization/FunctionRegistry.php

@@ -20,7 +20,7 @@ class FunctionRegistry
         if (empty(self::$functions)) {
             // Fonctions de "Scoring"
             self::$functions['tsp.calculateEnergy'] = [OptimizationUtils::class, 'evaluatePathDistance'];
-            self::$functions['portfolio.calculateMetrics'] = [OptimizationOperators::class, 'createPortfolioAllocator'];
+            self::$functions['portfolio.calculateMetrics'] = [OptimizationOperators::class, 'calculatePortfolioMetrics'];
             self::$functions['facility.calculateEnergy'] = [OptimizationOperators::class, 'evaluateFacilityLocation'];
 
             // Fonctions de "Résolution"

package/src/php/Optimization/OptimizationOperators.php

@@ -48,6 +48,19 @@ class OptimizationOperators
         }
     }
 
+    /**
+     * Évalue un portefeuille pour un payload donné.
+     * 
+     * @param array $weights
+     * @param array $payload
+     * @return float
+     */
+    public static function calculatePortfolioMetrics(array $weights, array $payload): float
+    {
+        $fitnessFunction = self::createPortfolioAllocator($payload);
+        return $fitnessFunction($weights);
+    }
+
     /**
      * Crée un évaluateur pour l'optimisation de portefeuille.
      * @param array $config

package/src/php/ProblemManager.php

@@ -238,6 +238,28 @@ class ProblemManager
                         return;
                     }
                 }
+
+                    // VÉRIFICATION PAR ÉCHANTILLONNAGE (Parité avec JS)
+                    $fitnessFunction = FunctionRegistry::get('portfolio.calculateMetrics');
+                    if ($fitnessFunction) {
+                        $sampleSize = min(5, count($solutionData['population']));
+                        $sampleKeys = (array)array_rand($solutionData['population'], $sampleSize);
+                        
+                        foreach ($sampleKeys as $key) {
+                            $individual = $solutionData['population'][$key];
+                            if (isset($individual['chromosome'])) {
+                                $recalculated = $fitnessFunction($individual['chromosome'], $problem['payload'] ?? []);
+                                if (isset($individual['fitness']) && $individual['fitness'] !== -1) {
+                                    if (abs($individual['fitness'] - $recalculated) > 1e-4) {
+                                        error_log("[ProblemManager] Triche détectée pour {$problemId}! Fitness déclaré: {$individual['fitness']}, recalculé: {$recalculated}");
+                                        return; // Rejeter en cas d'incohérence
+                                    }
+                                }
+                                $solutionData['population'][$key]['fitness'] = $recalculated;
+                            }
+                        }
+                    }
+
                     $problem['state']['population'] = $solutionData['population'];
                     $problem['state']['lastUpdate'] = (new \DateTime())->format(\DateTime::ATOM);
                     $stateChanged = true;
@@ -281,6 +303,89 @@ class ProblemManager
         return false;
     }
 
+    /**
+     * S'assure qu'un problème a une solution initiale. Si non, en génère une.
+     *
+     * @param array &$problem Le problème à vérifier (passé par référence).
+     */
+    private function ensureInitialSolution(array &$problem): void
+    {
+        if (!empty($problem['state']['bestSolution'])) {
+            return;
+        }
+
+        $scoreFunction = $problem['workUnit']['scoreFunction'] ?? null;
+        $initialSolutionSourceKey = $problem['workUnit']['initialSolutionSource'] ?? '';
+        $initialSolution = $problem['payload'][$initialSolutionSourceKey] ?? null;
+
+        if ($scoreFunction && is_array($initialSolution)) {
+            $score = $scoreFunction($initialSolution, $problem['payload'] ?? []);
+            $problem['state']['bestSolution'] = $initialSolution;
+            $problem['state']['bestEnergy'] = $score;
+            $problem['state']['lastUpdate'] = (new \DateTime())->format(\DateTime::ATOM);
+            $this->store->set("problem-state:{$problem['id']}", $problem['state']);
+        }
+    }
+
+    /**
+     * Formate l'état d'un problème pour l'export externe.
+     */
+    private function formatSolution(array $problem): ?array
+    {
+        if (!isset($problem['state'])) {
+            return null;
+        }
+
+        if (($problem['workUnit']['type'] ?? '') === 'multi_objective_genetic_algorithm') {
+            return [
+                'id' => $problem['id'],
+                'solution' => $problem['state']['paretoFront'] ?? [],
+                'score' => count($problem['state']['paretoFront'] ?? []),
+                'lastUpdate' => $problem['state']['lastUpdate'] ?? null,
+            ];
+        }
+
+        return [
+            'id' => $problem['id'],
+            'solution' => $problem['state']['bestSolution'] ?? null,
+            'score' => $problem['state']['bestEnergy'] ?? null,
+            'lastUpdate' => $problem['state']['lastUpdate'] ?? null,
+        ];
+    }
+
+    /**
+     * Récupère la meilleure solution actuellement connue pour un ou plusieurs problèmes.
+     *
+     * @param string|null $problemId L'ID optionnel du problème à consulter.
+     * @return array|null Un tableau associatif ou une liste de tableaux associatifs.
+     */
+    public function getBestSolutions(?string $problemId = null): ?array
+    {
+        $problemsToProcess = [];
+        foreach ($this->problems as &$p) {
+            if ($problemId === null || $p['id'] === $problemId) {
+                if (($p['workUnit']['type'] ?? '') !== 'multi_objective_genetic_algorithm') {
+                    $this->ensureInitialSolution($p);
+                }
+                $problemsToProcess[] = $p;
+            }
+        }
+        unset($p);
+
+        if ($problemId !== null) {
+            return !empty($problemsToProcess) ? $this->formatSolution($problemsToProcess[0]) : null;
+        }
+
+        $results = [];
+        foreach ($this->problems as $p) {
+            $formatted = $this->formatSolution($p);
+            if ($formatted && $formatted['solution'] !== null) {
+                $results[] = $formatted;
+            }
+        }
+        return $results;
+    }
+
     /**
      * Réinitialise l'instance singleton.
      * @internal Uniquement pour les tests.

package/src/php/Tests/ChallengeUtilsTest.php

@@ -40,7 +40,8 @@ class ChallengeUtilsTest extends TestCase
         };
 
         for ($idx = 0; $idx < 64; $idx++) {
-            $x = $fround($numericSeed + $idx * 0.015);
+            $x = $fround(fmod($numericSeed + $idx * 0.015, 1.0));
+            $x = $fround(fmod($numericSeed + $idx * 0.015, 1.0));
             $rFloat = $fround($r);
             for ($i = 0; $i < $iterations; $i++) {
                 $x = $fround($rFloat * $x * $fround(1.0 - $x));
@@ -78,7 +79,7 @@ class ChallengeUtilsTest extends TestCase
             return unpack('f', pack('f', $value))[1];
         };
         for ($idx = 0; $idx < 64; $idx++) {
-            $x = $fround($numericSeed + $idx * 0.015);
+            $x = $fround(fmod($numericSeed + $idx * 0.015, 1.0));
             $rFloat = $fround($r);
             for ($i = 0; $i < $iterations; $i++) {
                 $x = $fround($rFloat * $x * $fround(1.0 - $x));

package/src/php/Tests/IpReputationTest.php

@@ -155,7 +155,7 @@ class IpReputationTest extends TestCase
         $this->assertEquals(0.0, $score['subnetScore']);
 
         for ($i = 1; $i <= 12; $i++) {
-            RequestUtils::updateSubnetMetrics($context, "device-{$i}", 30.0);
+            RequestUtils::updateSubnetMetrics($context, "device-{$i}", 50.0);
         }
 
         $scoreWithHistory = RequestUtils::getSubnetScore($context, 'device-1');

package/src/php/Tests/ProblemManagerTest.php

@@ -372,6 +372,6 @@ class ProblemManagerTest extends TestCase
             );
 
         $manager = ProblemManager::getInstance($this->configPath, $storeMock);
-        $manager->integrateSolution($problemId, ['population' => [['chromosome' => [1.0], 'fitness' => -0.15]]]);
+        $manager->integrateSolution($problemId, ['population' => [['chromosome' => [1.0], 'fitness' => -1.0]]]);
     }
 }

package/src/php/Tests/QuicFingerprintTest.php

@@ -10,15 +10,15 @@ use PHPUnit\Framework\TestCase;
 
 class QuicFingerprintTest extends TestCase
 {
-    public function testGetQuicAnomalyScoreReturnsZeroIfNoFp(): void
+    public function testGetProtocolAnomalyScoreReturnsZeroIfNoFp(): void
     {
         $context = $this->createMock(RequestContext::class);
         $context->method('getHeader')->willReturn(null);
-        $res = RequestUtils::getQuicAnomalyScore($context);
-        $this->assertEquals(0.0, $res['quicAnomalyScore']);
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(0.0, $res['protocolAnomalyScore']);
     }
 
-    public function testGetQuicAnomalyScoreDetectsSpoofedChrome(): void
+    public function testGetProtocolAnomalyScoreDetectsSpoofedChrome(): void
     {
         $context = $this->createMock(RequestContext::class);
         $context->method('getHeader')->willReturnCallback(function($name) {
@@ -31,11 +31,11 @@ class QuicFingerprintTest extends TestCase
             return null;
         });
 
-        $res = RequestUtils::getQuicAnomalyScore($context);
-        $this->assertEquals(100.0, $res['quicAnomalyScore']);
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(100.0, $res['protocolAnomalyScore']);
     }
 
-    public function testGetQuicAnomalyScoreAllowsLegitChrome(): void
+    public function testGetProtocolAnomalyScoreAllowsLegitChrome(): void
     {
         $context = $this->createMock(RequestContext::class);
         $context->method('getHeader')->willReturnCallback(function($name) {
@@ -48,7 +48,7 @@ class QuicFingerprintTest extends TestCase
             return null;
         });
 
-        $res = RequestUtils::getQuicAnomalyScore($context);
-        $this->assertEquals(0.0, $res['quicAnomalyScore']);
+        $res = RequestUtils::getProtocolAnomalyScore($context);
+        $this->assertEquals(0.0, $res['protocolAnomalyScore']);
     }
 }

package/src/php/Utils/RequestUtils.php

@@ -1268,13 +1268,15 @@ class RequestUtils
         if (!isset($subnetData['uas'])) {
             $subnetData['uas'] = [];
         }
+        $now = time();
+        self::decaySubnetData($subnetData, $now);
 
         // Utilisation de la partie stable du fingerprint matériel plutôt que l'ID de cookie volatil
         $currentDeviceHash = self::getCompositeDeviceHash($context);
         $stableFpId = FingerprintBuilder::cyrb53(self::extractStablePart($currentDeviceHash));
 
         $currentDeviceContributions = $subnetData['highScoreDevices'][$stableFpId] ?? 0;
-        if ($currentDeviceContributions < 5 && $finalScore < 95) {
+        if ($currentDeviceContributions < 1 && $finalScore < 95) {
             $subnetData['highScoreDevices'][$stableFpId] = $currentDeviceContributions + 1;
             $subnetData['highScoreCount']++;
         }
@@ -1291,8 +1293,7 @@ class RequestUtils
         if (!empty($userAgent) && !in_array($userAgent, $subnetData['uas'], true)) {
             $subnetData['uas'][] = $userAgent;
         }
-
-        $subnetData['lastActivity'] = time();
+        $subnetData['lastActivity'] = $now;
 
         // Limiter la taille du tableau des deviceIds pour éviter une consommation mémoire excessive.
         if (count($subnetData['deviceIds']) > 100) {
@@ -1340,19 +1341,16 @@ class RequestUtils
         $inactivitySec = $now - ($subnetData['lastActivity'] ?? $now);
         $halfLives = (int)floor($inactivitySec / 1800);
 
+        if ($halfLives > 0) {
+            self::decaySubnetData($subnetData, $now);
+            $store->set($key, $subnetData, 86400);
+        }
+
         $highScoreCount = $subnetData['highScoreCount'] ?? 0;
         $deviceCount = isset($subnetData['deviceIds']) ? count($subnetData['deviceIds']) : 0;
         $ipCount = isset($subnetData['ips']) ? count($subnetData['ips']) : 1;
         $uaCount = isset($subnetData['uas']) ? count($subnetData['uas']) : 1;
 
-        if ($halfLives > 0) {
-            $decay = pow(2, $halfLives);
-            $highScoreCount = max(0, (int)floor($highScoreCount / $decay));
-            $deviceCount = max(0, (int)floor($deviceCount / $decay));
-            $ipCount = max(1, (int)floor($ipCount / $decay));
-            $uaCount = max(1, (int)floor($uaCount / $decay));
-        }
-
         if ($deviceCount === 0) {
             return ['subnetScore' => 0.0];
         }
@@ -1360,15 +1358,59 @@ class RequestUtils
         $suspicionDensity = $highScoreCount / $deviceCount;
         $ipDeviceRatio = $ipCount / $deviceCount;
 
+        // Ratio User-Agent / Device : détecte la rotation/spoofing de navigateurs sur une même empreinte matérielle
+        $uaDeviceRatio = (double)max(1, $uaCount) / $deviceCount;
+        $uaMultiplier = 0.6 + (0.4 * min(2.5, $uaDeviceRatio));
+
         $baseScore = 100.0 * (1.0 - exp(-0.15 * $highScoreCount));
 
         $densityMultiplier = 0.4 + (1.6 * $suspicionDensity);
         $distributionMultiplier = 0.5 + (1.0 * $ipDeviceRatio);
 
-        $finalScore = min(100.0, round($baseScore * $densityMultiplier * $distributionMultiplier * 10.0) / 10.0);
+        $dampening = 1.0;
+        if( $highScoreCount < 3 ){
+            $dampening = $highScoreCount / 3.0;
+        }
+        $finalScore = min(100.0, round($baseScore * $densityMultiplier * $distributionMultiplier * $uaMultiplier * $dampening * 10.0) / 10.0);
 
         return ['subnetScore' => $finalScore];
     }
+    /**
+     * Applies temporal decay (half-life of 30 minutes) to subnet metrics.
+     *
+     * @param array &$subnetData Subnet data passed by reference.
+     * @param int $now Current timestamp.
+     */
+    private static function decaySubnetData(array &$subnetData, int $now): void
+    {
+        $inactivitySec = $now - ($subnetData['lastActivity'] ?? $now);
+        $halfLives = (int)floor($inactivitySec / 1800);
+
+        if ($halfLives > 0) {
+            $decay = pow(2, $halfLives);
+            $subnetData['highScoreCount'] = max(0, (int)floor(($subnetData['highScoreCount'] ?? 0) / $decay));
+
+            if (isset($subnetData['highScoreDevices'])) {
+                foreach ($subnetData['highScoreDevices'] as $fpId => $val) {
+                    $decayedVal = (int)floor($val / $decay);
+                    if ($decayedVal <= 0) {
+                        unset($subnetData['highScoreDevices'][$fpId]);
+                    } else {
+                        $subnetData['highScoreDevices'][$fpId] = $decayedVal;
+                    }
+                }
+            }
+
+            foreach (['deviceIds', 'ips', 'uas'] as $field) {
+                if (isset($subnetData[$field])) {
+                    $newLen = max(0, (int)floor(count($subnetData[$field]) / $decay));
+                    $subnetData[$field] = array_slice($subnetData[$field], 0, $newLen);
+                }
+            }
+
+            $subnetData['lastActivity'] = $now - ($inactivitySec % 1800);
+        }
+    }
 
     /**
      * Calcule le score d'anomalie de similarité réseau (Botnet Clustering).
@@ -1820,52 +1862,75 @@ class RequestUtils
     }
 
     /**
-     * Détecte les anomalies de flux QUIC/HTTP3 par rapport au User-Agent.
+     * Détecte les anomalies de protocole (HTTP/2 et QUIC/HTTP3) par rapport au User-Agent.
      * @param RequestContext $context
-     * @return array{'quicAnomalyScore': float}
+     * @return array{'protocolAnomalyScore': float}
      */
-    public static function getQuicAnomalyScore(RequestContext $context): array
+    public static function getProtocolAnomalyScore(RequestContext $context): array
     {
-        $quicFp = $context->getHeader('x-quic-fp') ?? $context->quicFingerprint ?? null;
-        if (empty($quicFp) || !is_string($quicFp)) {
-            return ['quicAnomalyScore' => 0.0];
-        }
-
-        $parts = explode(';', $quicFp);
-        if (count($parts) < 2) {
-            return ['quicAnomalyScore' => 0.0];
-        }
-
-        $params = [];
-        foreach (explode(',', $parts[1]) as $p) {
-            $kv = explode('=', $p, 2);
-            if (count($kv) === 2) {
-                $params[$kv[0]] = $kv[1];
-            }
-        }
-        $priorityOrder = $parts[2] ?? '';
+        $http2Anomaly = 0.0;
+        $quicAnomaly = 0.0;
 
         $ua = $context->getHeader('user-agent') ?? '';
         $uaParts = self::parseUserAgent($ua);
         $browser = $uaParts['browser'] ?? null;
 
-        if (empty($browser)) {
-            return ['quicAnomalyScore' => 0.0];
+        // HTTP/2 Anomaly logic
+        $h2Fp = $context->getHeader('x-http2-fingerprint') ?? $context->http2Fingerprint ?? null;
+        if ($h2Fp && is_string($h2Fp) && $browser) {
+            $parts = explode('|', $h2Fp);
+            if (count($parts) >= 4) {
+                $connWindow = (int)$parts[1];
+                $headerOrder = $parts[3];
+                $isChromium = str_starts_with($browser, 'Chrome') || str_starts_with($browser, 'Edge');
+                $isFirefox = str_starts_with($browser, 'Firefox');
+                $isSafari = str_starts_with($browser, 'Safari');
+
+                if ($isChromium) {
+                    if ($headerOrder && $headerOrder !== 'm,a,s,p') $http2Anomaly += 60.0;
+                    if ($connWindow === 65535 || $connWindow === 65536) $http2Anomaly += 40.0;
+                } elseif ($isFirefox) {
+                    if ($headerOrder && $headerOrder !== 'm,s,p,a') $http2Anomaly += 60.0;
+                } elseif ($isSafari) {
+                    if ($headerOrder && $headerOrder !== 'm,s,p,a') $http2Anomaly += 60.0;
+                }
+            }
         }
 
-        $anomaly = 0.0;
-        if (str_starts_with($browser, 'Chrome') || str_starts_with($browser, 'Edge')) {
-            $maxData = isset($params['1']) ? (int)$params['1'] : 0;
-            $maxStreams = isset($params['4']) ? (int)$params['4'] : 0;
-            if ($maxData > 0 && $maxData < 1048576) $anomaly += 40.0;
-            if ($maxStreams > 0 && $maxStreams !== 100) $anomaly += 30.0;
-            if (!empty($priorityOrder) && !str_contains($priorityOrder, 'u=')) $anomaly += 30.0;
-        } elseif (str_starts_with($browser, 'Firefox')) {
-            $maxData = isset($params['1']) ? (int)$params['1'] : 0;
-            if ($maxData > 0 && $maxData > 5000000) $anomaly += 40.0;
+        // QUIC Anomaly logic
+        $quicFp = $context->getHeader('x-quic-fp') ?? $context->quicFingerprint ?? null;
+        if ($quicFp && is_string($quicFp) && $browser) {
+            $parts = explode(';', $quicFp);
+            if (count($parts) >= 2) {
+                $params = [];
+                foreach (explode(',', $parts[1]) as $p) {
+                    $kv = explode('=', $p, 2);
+                    if (count($kv) === 2) {
+                        $params[$kv[0]] = $kv[1];
+                    }
+                }
+                $priorityOrder = $parts[2] ?? '';
+
+                if (str_starts_with($browser, 'Chrome') || str_starts_with($browser, 'Edge')) {
+                    $maxData = isset($params['1']) ? (int)$params['1'] : 0;
+                    $maxStreams = isset($params['4']) ? (int)$params['4'] : 0;
+                    if ($maxData > 0 && $maxData < 1048576) $quicAnomaly += 40.0;
+                    if ($maxStreams > 0 && $maxStreams !== 100) $quicAnomaly += 30.0;
+                    if (!empty($priorityOrder) && !str_contains($priorityOrder, 'u=')) $quicAnomaly += 30.0;
+                } elseif (str_starts_with($browser, 'Firefox')) {
+                    $maxData = isset($params['1']) ? (int)$params['1'] : 0;
+                    if ($maxData > 0 && $maxData > 5000000) $quicAnomaly += 40.0;
+                }
+            }
         }
 
-        return ['quicAnomalyScore' => max(0.0, min(100.0, $anomaly))];
+        return [
+            'protocolAnomalyScore' => max(
+                0.0,
+                min(100.0, $http2Anomaly),
+                min(100.0, $quicAnomaly)
+            )
+        ];
     }
 
     /**