/** * @fileoverview Vulnerability Score Calculator * @module rules/vulnerabilities/scoring * * Dynamic scoring system for vulnerability detection that calculates risk scores * based on multiple factors including pattern matches, taint analysis, * exploitability, impact, and context. */ import { VulnerabilityRule, VulnerabilityScore, PatternMatch, AnalysisContext, TaintFlow, IScoreCalculator, ImpactAssessment, ExploitabilityAssessment } from '../types'; import { DEFAULT_SCORING_WEIGHTS } from '../constants'; /** * Vulnerability Score Calculator * Implements dynamic scoring based on multiple risk factors */ export declare class VulnerabilityScoreCalculator implements IScoreCalculator { private weights; constructor(customWeights?: Partial); /** * Calculate vulnerability score for a finding */ calculateScore(rule: VulnerabilityRule, matches: PatternMatch[], context: AnalysisContext, taintFlow?: TaintFlow): VulnerabilityScore; /** * Calculate score breakdown */ private calculateBreakdown; /** * Calculate total score from breakdown */ private calculateTotalScore; /** * Get default base score from severity */ private getDefaultBaseScore; /** * Calculate score from pattern matches */ private calculatePatternScore; /** * Calculate taint analysis score */ private calculateTaintScore; /** * Calculate exploitability score based on CVSS-like factors */ private calculateExploitabilityScore; /** * Calculate impact score based on CIA triad */ private calculateImpactScore; /** * Calculate context-based score adjustments */ private calculateContextScore; /** * Calculate correlation boost from related findings */ private calculateCorrelationBoost; /** * Calculate false positive penalty */ private calculateFalsePositivePenalty; /** * Convert score to severity level */ private scoreToSeverity; /** * Convert score to risk level description */ private scoreToRiskLevel; /** * Generate human-readable explanation of the score */ private generateExplanation; /** * Calculate CVSS-like base score */ calculateCvssBaseScore(impact: ImpactAssessment, exploitability: ExploitabilityAssessment): number; } export default VulnerabilityScoreCalculator; //# sourceMappingURL=index.d.ts.map