secure-scan 1.2.2

package/dist/rules/malware/engine/index.d.ts

@@ -0,0 +1,178 @@
+/**
+ * @fileoverview Malware Rule Engine - Core Detection Engine
+ * @module rules/malware/engine
+ *
+ * Orchestrates malware detection across all rule categories:
+ * - Multi-pattern matching with timeout protection
+ * - AST-aware analysis
+ * - Dynamic scoring
+ * - Rule correlation
+ * - Finding aggregation and deduplication
+ * - Concurrent execution with limits
+ */
+import { MalwareRule, MalwareFinding, MalwarePattern, AnalysisContext, AnalysisOptions, IMalwareRuleEngine, IPatternMatcher, PatternMatch, MalwareSeverity, SupportedLanguage, MalwareCategory, MalwareThreatType } from '../types';
+export declare class PatternMatcher implements IPatternMatcher {
+    private timeoutMs;
+    private maxMatches;
+    constructor(options?: {
+        timeoutMs?: number;
+        maxMatches?: number;
+    });
+    /**
+     * Match patterns against content (implements IPatternMatcher)
+     */
+    match(content: string, patterns: MalwarePattern[], language: SupportedLanguage): PatternMatch[];
+    /**
+     * Match with timeout protection (implements IPatternMatcher)
+     */
+    matchWithTimeout(content: string, patterns: MalwarePattern[], language: SupportedLanguage, timeout: number): Promise<PatternMatch[]>;
+    /**
+     * Match a single pattern against code
+     */
+    matchSinglePattern(pattern: MalwarePattern, code: string, language: SupportedLanguage): PatternMatch[];
+    /**
+     * Match regex pattern with timeout protection
+     */
+    private matchRegexPattern;
+    /**
+     * Match literal string pattern
+     */
+    private matchLiteralPattern;
+    /**
+     * Match heuristic pattern using entropy and obfuscation analysis
+     */
+    private matchHeuristicPattern;
+    /**
+     * Get line number from character index
+     */
+    private getLineNumber;
+}
+export interface EngineOptions {
+    enableHeuristics: boolean;
+    enableAstAnalysis: boolean;
+    timeoutMs: number;
+    maxFindings: number;
+    minConfidence: number;
+    language?: SupportedLanguage;
+}
+export declare class MalwareRuleEngine implements IMalwareRuleEngine {
+    private rules;
+    private patternMatcher;
+    private scoreCalculator;
+    private engineOptions;
+    constructor(rules: MalwareRule[], options?: Partial<EngineOptions>);
+    /**
+     * Analyze code against all enabled rules (implements IMalwareRuleEngine)
+     */
+    analyze(context: AnalysisContext, options?: AnalysisOptions): Promise<MalwareFinding[]>;
+    /**
+     * Convenience method to analyze code string directly
+     */
+    analyzeCode(code: string, contextOptions?: Partial<{
+        filePath: string;
+        language?: string;
+    }>): Promise<MalwareFinding[]>;
+    /**
+     * Get all rules (implements IMalwareRuleEngine)
+     */
+    getRules(): MalwareRule[];
+    /**
+     * Get rules by category (implements IMalwareRuleEngine)
+     */
+    getRulesByCategory(category: MalwareCategory): MalwareRule[];
+    /**
+     * Get rules by threat type (implements IMalwareRuleEngine)
+     */
+    getRulesByThreatType(type: MalwareThreatType): MalwareRule[];
+    /**
+     * Enable/disable a rule (implements IMalwareRuleEngine)
+     */
+    setRuleEnabled(ruleId: string, enabled: boolean): void;
+    /**
+     * Add a rule (implements IMalwareRuleEngine)
+     */
+    addRule(rule: MalwareRule): void;
+    /**
+     * Remove a rule (implements IMalwareRuleEngine)
+     */
+    removeRule(ruleId: string): void;
+    /**
+     * Get enabled rules, optionally filtered by language
+     */
+    private getEnabledRules;
+    /**
+     * Analyze code with a specific rule
+     */
+    private analyzeWithRule;
+    /**
+     * Calculate malware score for a finding
+     */
+    private calculateMalwareScore;
+    /**
+     * Get character index from source location
+     */
+    private getIndexFromLocation;
+    /**
+     * Calculate overall confidence from pattern matches
+     */
+    private calculateConfidence;
+    /**
+     * Map numeric confidence to ConfidenceLevel
+     */
+    private mapConfidenceToLevel;
+    /**
+     * Convert score to severity level
+     */
+    private scoreToSeverity;
+    /**
+     * Convert score to risk level
+     */
+    private scoreToRiskLevel;
+    /**
+     * Generate score explanation
+     */
+    private generateScoreExplanation;
+    /**
+     * Generate analysis explanation for a finding
+     */
+    private generateAnalysis;
+    /**
+     * Get all rules
+     */
+    getAllRules(): MalwareRule[];
+    /**
+     * Get enabled rule count
+     */
+    getEnabledRuleCount(): number;
+    /**
+     * Analyze multiple files concurrently
+     */
+    analyzeFiles(files: Array<{
+        path: string;
+        code: string;
+        language?: string;
+    }>): Promise<Map<string, MalwareFinding[]>>;
+    /**
+     * Generate analysis summary
+     */
+    generateSummary(findings: MalwareFinding[]): {
+        totalFindings: number;
+        bySeverity: Record<MalwareSeverity, number>;
+        byThreatType: Record<string, number>;
+        highestScore: number;
+        criticalCount: number;
+    };
+}
+/**
+ * Create a rule engine with all default rules
+ */
+export declare function createDefaultEngine(options?: Partial<EngineOptions>): MalwareRuleEngine;
+/**
+ * Quick scan function for simple use cases
+ */
+export declare function quickScan(code: string, language?: string): Promise<{
+    isMalicious: boolean;
+    score: number;
+    findings: MalwareFinding[];
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/rules/malware/engine/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/rules/malware/engine/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,WAAW,EACX,cAAc,EACd,cAAc,EAGd,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,YAAY,EAEZ,eAAe,EAGf,iBAAiB,EAEjB,eAAe,EACf,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAqBlB,qBAAa,cAAe,YAAW,eAAe;IACpD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,UAAU,CAAS;gBAEf,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAKjE;;OAEG;IACH,KAAK,CACH,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,cAAc,EAAE,EAC1B,QAAQ,EAAE,iBAAiB,GAC1B,YAAY,EAAE;IAWjB;;OAEG;IACG,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,cAAc,EAAE,EAC1B,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,YAAY,EAAE,CAAC;IAiB1B;;OAEG;IACH,kBAAkB,CAChB,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,iBAAiB,GAC1B,YAAY,EAAE;IA2BjB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAoC3B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IA+C7B;;OAEG;IACH,OAAO,CAAC,aAAa;CAGtB;AAMD,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CAC9B;AAED,qBAAa,iBAAkB,YAAW,kBAAkB;IAC1D,OAAO,CAAC,KAAK,CAA2B;IACxC,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,eAAe,CAAyB;IAChD,OAAO,CAAC,aAAa,CAAgB;gBAGnC,KAAK,EAAE,WAAW,EAAE,EACpB,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC;IAelC;;OAEG;IACG,OAAO,CACX,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,cAAc,EAAE,CAAC;IAmC5B;;OAEG;IACG,WAAW,CACf,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAChE,OAAO,CAAC,cAAc,EAAE,CAAC;IAc5B;;OAEG;IACH,QAAQ,IAAI,WAAW,EAAE;IAIzB;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,eAAe,GAAG,WAAW,EAAE;IAI5D;;OAEG;IACH,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,WAAW,EAAE;IAI5D;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI;IAOtD;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAIhC;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC;;OAEG;IACH,OAAO,CAAC,eAAe;IAYvB;;OAEG;YACW,eAAe;IA0F7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAoC7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAa3B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAQ5B;;OAEG;IACH,OAAO,CAAC,eAAe;IAQvB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAQxB;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAShC;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAoBxB;;OAEG;IACH,WAAW,IAAI,WAAW,EAAE;IAI5B;;OAEG;IACH,mBAAmB,IAAI,MAAM;IAI7B;;OAEG;IACG,YAAY,CAChB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAC9D,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IAwBzC;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG;QAC3C,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC5C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACvB;CA+BF;AAMD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,iBAAiB,CAEvF;AAED;;GAEG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,QAAQ,CAAC,EAAE,MAAM,GAChB,OAAO,CAAC;IACT,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B,CAAC,CAmBD"}