@nahisaho/musubix-security 1.8.0 → 1.8.5

package/dist/analyzers/sast/zero-day-detector.d.ts

@@ -0,0 +1,183 @@
+/**
+ * @fileoverview Zero-Day Vulnerability Detector using Knowledge Graph Pattern Deviation
+ * @module @nahisaho/musubix-security/analyzers/sast/zero-day-detector
+ * @trace DES-SEC2-SAST-003, REQ-SEC2-SAST-003
+ */
+import type { Vulnerability, Severity, SourceLocation } from '../../types/vulnerability.js';
+/**
+ * Zero-day detection result
+ */
+export interface ZeroDayResult {
+    vulnerability: ZeroDayVulnerability;
+    deviation: PatternDeviation;
+    riskAssessment: RiskAssessment;
+    confidence: number;
+}
+/**
+ * Zero-day vulnerability
+ */
+export interface ZeroDayVulnerability {
+    id: string;
+    type: 'unknown-pattern' | 'anomalous-flow' | 'unusual-api-usage' | 'suspicious-construct';
+    severity: Severity;
+    location: SourceLocation;
+    description: string;
+    recommendation: string;
+    codeSnippet: string;
+}
+/**
+ * Pattern deviation analysis
+ */
+export interface PatternDeviation {
+    patternId: string;
+    expectedPattern: string;
+    observedPattern: string;
+    deviationScore: number;
+    deviationType: 'structural' | 'behavioral' | 'temporal' | 'contextual';
+    context: PatternContext;
+}
+/**
+ * Pattern context
+ */
+export interface PatternContext {
+    surroundingCode: string;
+    callStack: string[];
+    dataFlowPath: string[];
+    relatedPatterns: string[];
+}
+/**
+ * Risk assessment
+ */
+export interface RiskAssessment {
+    overallRisk: Severity;
+    exploitability: number;
+    impact: number;
+    attackVector: string;
+    mitigationComplexity: 'low' | 'medium' | 'high';
+    businessImpact: string;
+}
+/**
+ * Detection options
+ */
+export interface ZeroDayOptions {
+    /** Minimum deviation score to report */
+    minDeviationScore?: number;
+    /** Enable knowledge graph analysis */
+    enableKGAnalysis?: boolean;
+    /** Enable heuristic analysis */
+    enableHeuristics?: boolean;
+    /** Enable LLM-assisted analysis */
+    enableLLMAnalysis?: boolean;
+    /** Custom baseline patterns */
+    customBaseline?: CodePattern[];
+}
+/**
+ * Code pattern definition
+ */
+export interface CodePattern {
+    id: string;
+    name: string;
+    type: 'safe' | 'dangerous' | 'neutral';
+    signature: PatternSignature;
+    frequency: number;
+    confidence: number;
+}
+/**
+ * Pattern signature
+ */
+export interface PatternSignature {
+    astPattern?: string;
+    callSequence?: string[];
+    dataFlowPattern?: string;
+    contextMarkers?: string[];
+}
+/**
+ * Zero-Day Detector implementation
+ * @trace DES-SEC2-SAST-003
+ */
+export declare class ZeroDayDetector {
+    private options;
+    private knowledgeGraph;
+    constructor(options?: ZeroDayOptions);
+    /**
+     * Detect potential zero-day vulnerabilities
+     * @trace REQ-SEC2-SAST-003
+     */
+    detect(code: string, filePath: string): Promise<ZeroDayResult[]>;
+    /**
+     * Build local knowledge graph from code
+     */
+    private buildLocalKnowledgeGraph;
+    /**
+     * Extract function body from code
+     */
+    private extractFunctionBody;
+    /**
+     * Detect suspicious patterns using heuristics
+     */
+    private detectSuspiciousPatterns;
+    /**
+     * Analyze pattern deviation using knowledge graph
+     */
+    private analyzePatternDeviation;
+    /**
+     * Detect unusual API usage patterns
+     */
+    private detectAPIUsageDeviations;
+    /**
+     * Detect data flow anomalies
+     */
+    private detectDataFlowAnomalies;
+    /**
+     * LLM-assisted analysis (placeholder for future implementation)
+     */
+    analyzeWithLLM(_code: string, _filePath: string): Promise<ZeroDayResult[]>;
+    /**
+     * Assess risk for a detected pattern
+     */
+    assessRisk(pattern: {
+        severity: Severity;
+        description: string;
+    }, deviationScore: number): RiskAssessment;
+    /**
+     * Calculate deviation score based on context
+     */
+    private calculateDeviationScore;
+    /**
+     * Generate recommendation for pattern
+     */
+    private generateRecommendation;
+    /**
+     * Extract code snippet around line
+     */
+    private extractCodeSnippet;
+    /**
+     * Extract call stack from context
+     */
+    private extractCallStack;
+    /**
+     * Extract data flow path
+     */
+    private extractDataFlowPath;
+    /**
+     * Determine attack vector
+     */
+    private determineAttackVector;
+    /**
+     * Determine mitigation complexity
+     */
+    private determineMitigationComplexity;
+    /**
+     * Determine business impact
+     */
+    private determineBusinessImpact;
+    /**
+     * Convert results to standard vulnerability format
+     */
+    toVulnerabilities(results: ZeroDayResult[]): Vulnerability[];
+}
+/**
+ * Create zero-day detector instance
+ */
+export declare function createZeroDayDetector(options?: ZeroDayOptions): ZeroDayDetector;
+//# sourceMappingURL=zero-day-detector.d.ts.map

package/dist/analyzers/sast/zero-day-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zero-day-detector.d.ts","sourceRoot":"","sources":["../../../src/analyzers/sast/zero-day-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAE5F;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,oBAAoB,CAAC;IACpC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,sBAAsB,CAAC;IAC1F,QAAQ,EAAE,QAAQ,CAAC;IACnB,QAAQ,EAAE,cAAc,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,YAAY,GAAG,YAAY,GAAG,UAAU,GAAG,YAAY,CAAC;IACvE,OAAO,EAAE,cAAc,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,QAAQ,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAChD,cAAc,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,wCAAwC;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gCAAgC;IAChC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,+BAA+B;IAC/B,cAAc,CAAC,EAAE,WAAW,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IACvC,SAAS,EAAE,gBAAgB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAwGD;;;GAGG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,cAAc,CAAsB;gBAIhC,OAAO,GAAE,cAAmB;IAaxC;;;OAGG;IACG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA+BtE;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA8DhC;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAiC3B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA0DhC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAkB/B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAoEhC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA4E/B;;OAEG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAMhF;;OAEG;IACH,UAAU,CACR,OAAO,EAAE;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EACpD,cAAc,EAAE,MAAM,GACrB,cAAc;IA2BjB;;OAEG;IACH,OAAO,CAAC,uBAAuB;IA+B/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAiB9B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAM1B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAiBxB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAgB3B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;OAEG;IACH,OAAO,CAAC,6BAA6B;IAMrC;;OAEG;IACH,OAAO,CAAC,uBAAuB;IAW/B;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE;CAgB7D;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,eAAe,CAE/E"}