J.

Jev Firewall behaviour Code Example

Decide whether a burst of connections should be blocked before it reaches the application.

A burst of 147 connections reaches 42 ports in 60 seconds.

Connections 147
Ports 42
Window Seconds 60

Should this traffic be blocked?

0% Block.
Block 97%
Allow 2%
Investigate 1%

Temporarily quarantine the source and open a security event.

Code
Conceptual pseudocode — not official Jev SDK syntax
// Conceptual pseudocode — not Jev SDK syntax
const state = {
  "connections": 147,
  "ports": 42,
  "window_seconds": 60
};

const decision = await evaluateDecision({
  state,
  question: "Should this traffic be blocked?",
  options: ["Block","Allow","Investigate"],
});

// Your adapter normalizes the provider response.
// Tune this example threshold on labelled data.
if (decision.outcome === "Block"
    && decision.probability >= 0.85) {
  blockTraffic(decision);
} else {
  queueForReview(decision);
}

This adapter illustrates the decision boundary. Check the official Jev docs for current API syntax.