Statistical Anomaly Detector
class StatisticalAnomalyDetector(policy: AnomalyPolicy = AnomalyPolicy.enabledDefaults()) : AnomalyDetector
Lightweight statistical anomaly detector.
Uses O(1) memory per event type for:
Payload size z-score (rolling mean/stddev)
Event rate anomaly detection (sliding window counter)
Schema deviation scoring (unexpected/missing fields)
Field cardinality tracking (detects enumeration attacks)
Pure Kotlin, thread-safe, no external dependencies. NIST SI-4: Information System Monitoring.
Since
0.5.0