提交Git

2026-05-10 12:59:00 +08:00
commit b0aaea9fb3
2544 changed files with 545276 additions and 0 deletions
@@ -0,0 +1,89 @@
+package com.aluer.security;
+
+import com.aluer.config.ServerGuardConfig;
+import jakarta.annotation.PostConstruct;
+import jakarta.annotation.PreDestroy;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.stereotype.Component;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+import java.util.concurrent.Executors;
+import java.util.concurrent.ScheduledExecutorService;
+import java.util.concurrent.TimeUnit;
+
+@Component
+public class SecurityAutomationScheduler {
+    private final ServerGuardConfig config;
+    private final ThreatIntelligenceService threatIntelligenceService;
+    private final FileIntegrityMonitorService fileIntegrityMonitorService;
+    private final HostEnforcementService hostEnforcementService;
+    private final DDoSDefenseCoordinator ddosDefenseCoordinator;
+    private final HostIntrusionCountermeasureService hostIntrusionCountermeasureService;
+    private final ScheduledExecutorService scheduler = Executors.newScheduledThreadPool(1);
+
+    private volatile boolean running = false;
+
+    public SecurityAutomationScheduler() {
+        this(new ServerGuardConfig(), new ThreatIntelligenceService(), new FileIntegrityMonitorService(),
+            new HostEnforcementService(), new DDoSDefenseCoordinator(), new HostIntrusionCountermeasureService());
+    }
+
+    @Autowired
+    public SecurityAutomationScheduler(ServerGuardConfig config,
+                                       ThreatIntelligenceService threatIntelligenceService,
+                                       FileIntegrityMonitorService fileIntegrityMonitorService,
+                                       HostEnforcementService hostEnforcementService,
+                                       DDoSDefenseCoordinator ddosDefenseCoordinator,
+                                       HostIntrusionCountermeasureService hostIntrusionCountermeasureService) {
+        this.config = config;
+        this.threatIntelligenceService = threatIntelligenceService;
+        this.fileIntegrityMonitorService = fileIntegrityMonitorService;
+        this.hostEnforcementService = hostEnforcementService;
+        this.ddosDefenseCoordinator = ddosDefenseCoordinator;
+        this.hostIntrusionCountermeasureService = hostIntrusionCountermeasureService;
+    }
+
+    @PostConstruct
+    public void start() {
+        if (running || !config.getSecurity().getAutomation().isEnabled()) {
+            return;
+        }
+
+        running = true;
+        int feedMinutes = Math.max(1, config.getSecurity().getAutomation().getFeedRefreshMinutes());
+        int syncMinutes = Math.max(1, config.getSecurity().getAutomation().getRuleSyncMinutes());
+        int integrityMinutes = Math.max(1, config.getSecurity().getAutomation().getIntegrityRescanMinutes());
+
+        scheduler.scheduleAtFixedRate(threatIntelligenceService::refreshFeeds, 1, feedMinutes, TimeUnit.MINUTES);
+        scheduler.scheduleAtFixedRate(hostEnforcementService::syncDesiredState, 1, syncMinutes, TimeUnit.MINUTES);
+        scheduler.scheduleAtFixedRate(fileIntegrityMonitorService::scanNow, 1, integrityMinutes, TimeUnit.MINUTES);
+        scheduler.scheduleAtFixedRate(hostIntrusionCountermeasureService::runFullScan, 2, integrityMinutes, TimeUnit.MINUTES);
+    }
+
+    public Map<String, Object> runMaintenanceCycle() {
+        Map<String, Object> cycle = new LinkedHashMap<>();
+        cycle.put("feeds", threatIntelligenceService.refreshFeeds());
+        cycle.put("hostRules", hostEnforcementService.syncDesiredState());
+        cycle.put("integrity", fileIntegrityMonitorService.scanNow());
+        cycle.put("antiIntrusion", hostIntrusionCountermeasureService.runFullScan());
+        cycle.put("ddos", ddosDefenseCoordinator.getPosture());
+        return cycle;
+    }
+
+    public Map<String, Object> getStatus() {
+        Map<String, Object> status = new LinkedHashMap<>();
+        status.put("running", running);
+        status.put("automationEnabled", config.getSecurity().getAutomation().isEnabled());
+        status.put("feedRefreshMinutes", config.getSecurity().getAutomation().getFeedRefreshMinutes());
+        status.put("integrityRescanMinutes", config.getSecurity().getAutomation().getIntegrityRescanMinutes());
+        status.put("ruleSyncMinutes", config.getSecurity().getAutomation().getRuleSyncMinutes());
+        return status;
+    }
+
+    @PreDestroy
+    public void shutdown() {
+        running = false;
+        scheduler.shutdownNow();
+    }
+}