StatisticalAnomalyDetector

class StatisticalAnomalyDetector(policy: AnomalyPolicy = AnomalyPolicy.enabledDefaults()) : AnomalyDetector

Lightweight statistical anomaly detector.

Uses O(1) memory per event type for:

  • Payload size z-score (rolling mean/stddev)

  • Event rate anomaly detection (sliding window counter)

  • Schema deviation scoring (unexpected/missing fields)

  • Field cardinality tracking (detects enumeration attacks)

Pure Kotlin, thread-safe, no external dependencies. NIST SI-4: Information System Monitoring.

Since

0.5.0

Constructors

Link copied to clipboard
constructor(policy: AnomalyPolicy = AnomalyPolicy.enabledDefaults())

Types

Link copied to clipboard
object Companion

Functions

Link copied to clipboard
open override fun analyze(eventType: String, payloadJson: String): AnomalyResult

Analyze an event for anomalies.

Link copied to clipboard

Pre-populate the detector with known-good baseline statistics.