com.newrelic.agent.config

Class SecurityAgentConfig

java.lang.Object

com.newrelic.agent.config.SecurityAgentConfig

public class SecurityAgentConfig
extends java.lang.Object

Field Summary

Fields

Modifier and Type	Field and Description
static java.util.Set<java.lang.String>	SECURITY_AGENT_CLASS_TRANSFORMER_EXCLUDES_TO_IGNORE
static java.lang.String	SECURITY_AGENT_ENABLED
static boolean	SECURITY_AGENT_ENABLED_DEFAULT
static java.lang.String	SECURITY_DETECTION_DESERIALIZATION_ENABLED
static boolean	SECURITY_DETECTION_DESERIALIZATION_ENABLED_DEFAULT
static java.lang.String	SECURITY_DETECTION_RCI_ENABLED
static boolean	SECURITY_DETECTION_RCI_ENABLED_DEFAULT
static java.lang.String	SECURITY_DETECTION_RXSS_ENABLED
static boolean	SECURITY_DETECTION_RXSS_ENABLED_DEFAULT
static java.lang.String	SECURITY_ENABLED
static boolean	SECURITY_ENABLED_DEFAULT
static java.lang.String	SECURITY_LOW_PRIORITY_INSTRUMENTATION_ENABLED
static boolean	SECURITY_LOW_PRIORITY_INSTRUMENTATION_ENABLED_DEFAULT
static java.lang.String	SECURITY_MODE
static java.lang.String	SECURITY_MODE_DEFAULT
static java.lang.String	SECURITY_VALIDATOR_SERVICE_URL
static java.lang.String	SECURITY_VALIDATOR_SERVICE_URL_DEFAULT

Constructor Summary

Constructors

Constructor and Description
SecurityAgentConfig()

Method Summary

Modifier and Type	Method and Description
static void	addSecurityAgentConfigSupportabilityMetrics() Create supportability metrics showing the enabled status of the security agent.
static java.lang.String	getSecurityAgentMode() Get the Security agent mode.
static java.lang.String	getSecurityAgentValidatorServiceUrl() Get the validator service URL that the security agent communicates with.
static boolean	isSecurityAgentEnabled() Determines whether the security agent will be enabled or completely disabled.
static boolean	isSecurityDetectionDeserializationEnabled() Determines whether the security agent should detect deserialization events.
static boolean	isSecurityDetectionRciEnabled() Determines whether the security agent should detect RCI events.
static boolean	isSecurityDetectionRxssEnabled() Determines whether the security agent should detect RXSS events.
static boolean	isSecurityEnabled() Determines whether the security agent, once initialized, is allowed to send security data to New Relic.
static boolean	isSecurityLowPriorityInstrumentationEnabled() Determines whether the security agent low priority attack/vulnerability modules will instrument or not.
static void	logSettings(java.util.logging.Level logLevel) Log security settings to help debug when the IAST agent is not enabled.
static boolean	shouldInitializeSecurityAgent() Determines whether the security agent should be initialized.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SECURITY_AGENT_ENABLED

public static final java.lang.String SECURITY_AGENT_ENABLED

See Also:

Constant Field Values

SECURITY_AGENT_ENABLED_DEFAULT

public static final boolean SECURITY_AGENT_ENABLED_DEFAULT

See Also:

Constant Field Values

SECURITY_ENABLED

public static final java.lang.String SECURITY_ENABLED

See Also:

Constant Field Values

SECURITY_ENABLED_DEFAULT

public static final boolean SECURITY_ENABLED_DEFAULT

See Also:

Constant Field Values

SECURITY_LOW_PRIORITY_INSTRUMENTATION_ENABLED

public static final java.lang.String SECURITY_LOW_PRIORITY_INSTRUMENTATION_ENABLED

See Also:

Constant Field Values

SECURITY_LOW_PRIORITY_INSTRUMENTATION_ENABLED_DEFAULT

public static final boolean SECURITY_LOW_PRIORITY_INSTRUMENTATION_ENABLED_DEFAULT

See Also:

Constant Field Values

SECURITY_MODE

public static final java.lang.String SECURITY_MODE

See Also:

Constant Field Values

SECURITY_MODE_DEFAULT

public static final java.lang.String SECURITY_MODE_DEFAULT

See Also:

Constant Field Values

SECURITY_VALIDATOR_SERVICE_URL

public static final java.lang.String SECURITY_VALIDATOR_SERVICE_URL

See Also:

Constant Field Values

SECURITY_VALIDATOR_SERVICE_URL_DEFAULT

public static final java.lang.String SECURITY_VALIDATOR_SERVICE_URL_DEFAULT

See Also:

Constant Field Values

SECURITY_DETECTION_RCI_ENABLED

public static final java.lang.String SECURITY_DETECTION_RCI_ENABLED

See Also:

Constant Field Values

SECURITY_DETECTION_RCI_ENABLED_DEFAULT

public static final boolean SECURITY_DETECTION_RCI_ENABLED_DEFAULT

See Also:

Constant Field Values

SECURITY_DETECTION_RXSS_ENABLED

public static final java.lang.String SECURITY_DETECTION_RXSS_ENABLED

See Also:

Constant Field Values

SECURITY_DETECTION_RXSS_ENABLED_DEFAULT

public static final boolean SECURITY_DETECTION_RXSS_ENABLED_DEFAULT

See Also:

Constant Field Values

SECURITY_DETECTION_DESERIALIZATION_ENABLED

public static final java.lang.String SECURITY_DETECTION_DESERIALIZATION_ENABLED

See Also:

Constant Field Values

SECURITY_DETECTION_DESERIALIZATION_ENABLED_DEFAULT

public static final boolean SECURITY_DETECTION_DESERIALIZATION_ENABLED_DEFAULT

See Also:

Constant Field Values

SECURITY_AGENT_CLASS_TRANSFORMER_EXCLUDES_TO_IGNORE

public static final java.util.Set<java.lang.String> SECURITY_AGENT_CLASS_TRANSFORMER_EXCLUDES_TO_IGNORE

Constructor Detail

SecurityAgentConfig

public SecurityAgentConfig()

Method Detail

addSecurityAgentConfigSupportabilityMetrics

public static void addSecurityAgentConfigSupportabilityMetrics()

Create supportability metrics showing the enabled status of the security agent.

shouldInitializeSecurityAgent

public static boolean shouldInitializeSecurityAgent()

Determines whether the security agent should be initialized.

Returns:

True if security agent should be initialized, false if not

isSecurityAgentEnabled

public static boolean isSecurityAgentEnabled()

Determines whether the security agent will be enabled or completely disabled.

Returns:

True if security agent should be enabled, false if it should be completely disabled

isSecurityEnabled

public static boolean isSecurityEnabled()

Determines whether the security agent, once initialized, is allowed to send security data to New Relic.

Returns:

True if security agent should send data, false if it should not

isSecurityDetectionRciEnabled

public static boolean isSecurityDetectionRciEnabled()

Determines whether the security agent should detect RCI events.

Returns:

True if security agent should detect RCI events, false if it should not

isSecurityDetectionRxssEnabled

public static boolean isSecurityDetectionRxssEnabled()

Determines whether the security agent should detect RXSS events.

Returns:

True if security agent should detect RXSS events, false if it should not

isSecurityDetectionDeserializationEnabled

public static boolean isSecurityDetectionDeserializationEnabled()

Determines whether the security agent should detect deserialization events.

Returns:

True if security agent should detect deserialization events, false if it should not

getSecurityAgentValidatorServiceUrl

public static java.lang.String getSecurityAgentValidatorServiceUrl()

Get the validator service URL that the security agent communicates with.

Returns:

String representing the validator service URL that the security agent communicates with

getSecurityAgentMode

public static java.lang.String getSecurityAgentMode()

Get the Security agent mode. Default is IAST.

Returns:

String representing the Security agent mode

isSecurityLowPriorityInstrumentationEnabled

public static boolean isSecurityLowPriorityInstrumentationEnabled()

Determines whether the security agent low priority attack/vulnerability modules will instrument or not.

Returns:

True if security agent should instrument low priority attack/vulnerability modules, false if it should not

logSettings

public static void logSettings(java.util.logging.Level logLevel)

Log security settings to help debug when the IAST agent is not enabled.