System Architecture

This document details the internal workings of the DeTracker Intrusion Detection System (IDS).

1. The Sensor (Telemetry Layer)

The sensor is a script injected into the MAIN world of every page. Its function is passive telemetry.

• Monkey Patching: Intercepts fetch, XMLHttpRequest, Canvas, and Audio APIs.
• Stack Memoization: Uses a callerCache to minimize CPU impact (O(1) lookups).
• Isolation: Communicates via postMessage to the ISOLATED world bridge.

2. Decision Engine (Hybrid)

Located in the Offscreen Document, combining two complementary structures:

• DFA Components: Deterministic Finite Automaton for known tracking entities.
• EKF in WASM: Extended Kalman Filter for real-time behavioral analysis.

3. MV3 Orchestration

Utilizes a Service Worker as a router and the Offscreen Document for persistent WASM state and P2P Swarm signaling.