com.mozilla.secops.customs

Class CustomsAlert

java.lang.Object

com.mozilla.secops.customs.CustomsAlert

All Implemented Interfaces:

Serializable

public class CustomsAlert
extends Object
implements Serializable

Alert format used for notifications to FxA

See Also:

Serialized Form

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	CustomsAlert.AlertAction Alert actions
static class	CustomsAlert.AlertSeverity Severity of a given alert
static class	CustomsAlert.IndicatorType Indicator types

Constructor Summary

Constructors

Constructor and Description
CustomsAlert() Construct new CustomsAlert

Method Summary

Modifier and Type	Method and Description
static ArrayList<CustomsAlert>	convertAccountCreationAbuse(Alert a) Convert an account creation abuse alert
static ArrayList<CustomsAlert>	convertAccountCreationAbuseDistributed(Alert a) Convert an account creation abuse distributed alert
static ArrayList<CustomsAlert>	convertLoginFailureAtRiskAccount(Alert a) Convert an at risk account alert
static ArrayList<CustomsAlert>	convertPasswordResetAbuse(Alert a) Convert a password reset abuse alert
static ArrayList<CustomsAlert>	convertSourceLoginFailure(Alert a) Convert source login failure alert into a list of customs alerts.
static ArrayList<CustomsAlert>	convertSourceLoginFailureDist(Alert a) Convert a distributed source login failure alert into a list of customs alerts.
static ArrayList<CustomsAlert>	convertStatusComparator(Alert a) Convert a status comparator alert
static ArrayList<CustomsAlert>	convertVelocity(Alert a) Convert a velocity alert
static ArrayList<CustomsAlert>	fromAlert(Alert a) Convert an Alert into one or more instances of CustomsAlert
Integer	getConfidence() Get confidence
HashMap<String,Object>	getDetails() Get details map
String	getHeuristic() Get heuristic
String	getHeuristicDescription() Get heuristic description
UUID	getId() Get UUID
String	getIndicator() Get indicator
CustomsAlert.IndicatorType	getIndicatorType() Get indicator type
String	getReason() Get reason
CustomsAlert.AlertSeverity	getSeverity() Get severity
CustomsAlert.AlertAction	getSuggestedAction() Get suggested action
org.joda.time.DateTime	getTimestamp() Get timestamp
void	setConfidence(Integer confidence) Set confidence
void	setDetails(HashMap<String,Object> details) Set details map
void	setHeuristic(String heuristic) Set heuristic
void	setHeuristicDescription(String heuristicDescription) Set heuristic description
void	setId(UUID alertId) Set UUID
void	setIndicator(String indicator) Set indicator
void	setIndicatorType(CustomsAlert.IndicatorType indicatorType) Set indicator type
void	setReason(String reason) Set reason
void	setSeverity(CustomsAlert.AlertSeverity severity) Set severity
void	setSuggestedAction(CustomsAlert.AlertAction suggestedAction) Set suggested action
void	setTimestamp(org.joda.time.DateTime timestamp) Set timestamp
String	toJSON() Return JSON string representation.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CustomsAlert

public CustomsAlert()

Construct new CustomsAlert

Method Detail

fromAlert

public static ArrayList<CustomsAlert> fromAlert(Alert a)

Convert an Alert into one or more instances of CustomsAlert

This method will convert an alert that has been generated by the customs pipeline into one or more CustomsAlert objects which can then be submitted directly to the FxA service.

This method contains special handling for the various types of alert messages that can be generated by the Customs pipeline

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert, or null if conversion was not possible

convertSourceLoginFailure

public static ArrayList<CustomsAlert> convertSourceLoginFailure(Alert a)

Convert source login failure alert into a list of customs alerts.

Parameters:

a - Alert to convert

Returns:

ArrayList of CustomsAlert created

convertSourceLoginFailureDist

public static ArrayList<CustomsAlert> convertSourceLoginFailureDist(Alert a)

Convert a distributed source login failure alert into a list of customs alerts.

Parameters:

a - Alert to convert

Returns:

ArrayList of CustomsAlert created

convertAccountCreationAbuse

public static ArrayList<CustomsAlert> convertAccountCreationAbuse(Alert a)

Convert an account creation abuse alert

The IP address will be noted as suspected, in addition to the accounts that have been created.

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert

convertAccountCreationAbuseDistributed

public static ArrayList<CustomsAlert> convertAccountCreationAbuseDistributed(Alert a)

Convert an account creation abuse distributed alert

The IP address will be noted as suspected, in addition to the account in the alert.

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert

convertPasswordResetAbuse

public static ArrayList<CustomsAlert> convertPasswordResetAbuse(Alert a)

Convert a password reset abuse alert

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert

convertVelocity

public static ArrayList<CustomsAlert> convertVelocity(Alert a)

Convert a velocity alert

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert

convertStatusComparator

public static ArrayList<CustomsAlert> convertStatusComparator(Alert a)

Convert a status comparator alert

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert

convertLoginFailureAtRiskAccount

public static ArrayList<CustomsAlert> convertLoginFailureAtRiskAccount(Alert a)

Convert an at risk account alert

Parameters:

a - Alert

Returns:

ArrayList of CustomsAlert

setTimestamp

public void setTimestamp(org.joda.time.DateTime timestamp)

Set timestamp

Parameters:

timestamp - DateTime

getTimestamp

public org.joda.time.DateTime getTimestamp()

Get timestamp

Returns:

DateTime

setId

public void setId(UUID alertId)

Set UUID

Parameters:

alertId - UUID

getId

public UUID getId()

Get UUID

Returns:

UUID

setIndicatorType

public void setIndicatorType(CustomsAlert.IndicatorType indicatorType)

Set indicator type

Parameters:

indicatorType - IndicatorType

getIndicatorType

public CustomsAlert.IndicatorType getIndicatorType()

Get indicator type

Returns:

IndicatorType

setIndicator

public void setIndicator(String indicator)

Set indicator

Parameters:

indicator - String

getIndicator

public String getIndicator()

Get indicator

Returns:

String

setSeverity

public void setSeverity(CustomsAlert.AlertSeverity severity)

Set severity

Parameters:

severity - AlertSeverity

getSeverity

public CustomsAlert.AlertSeverity getSeverity()

Get severity

Returns:

AlertSeverity

setConfidence

public void setConfidence(Integer confidence)

Set confidence

Parameters:

confidence - Integer

getConfidence

public Integer getConfidence()

Get confidence

Returns:

Integer

setHeuristic

public void setHeuristic(String heuristic)

Set heuristic

Parameters:

heuristic - String

getHeuristic

public String getHeuristic()

Get heuristic

Returns:

String

setHeuristicDescription

public void setHeuristicDescription(String heuristicDescription)

Set heuristic description

Parameters:

heuristicDescription - String

getHeuristicDescription

public String getHeuristicDescription()

Get heuristic description

Returns:

String

setReason

public void setReason(String reason)

Set reason

Parameters:

reason - String

getReason

public String getReason()

Get reason

Returns:

String

setSuggestedAction

public void setSuggestedAction(CustomsAlert.AlertAction suggestedAction)

Set suggested action

Parameters:

suggestedAction - AlertAction

getSuggestedAction

public CustomsAlert.AlertAction getSuggestedAction()

Get suggested action

Returns:

AlertAction

setDetails

public void setDetails(HashMap<String,Object> details)

Set details map

Parameters:

details - HashMap

getDetails

public HashMap<String,Object> getDetails()

Get details map

Returns:

HashMap

toJSON

public String toJSON()

Return JSON string representation.

Returns:

String or null if serialization fails.