Skip to content

Commit ab0b05f

Browse files
adulauadulau
authored
Merge pull request #507 from MISP/codex/propose-misp-object-template-for-drone-id
Add drone-rid-observation MISP object template
2 parents 4925362 + 571522b commit ab0b05f

1 file changed

Lines changed: 172 additions & 0 deletions

File tree

‎objects/drone-rid-observation/definition.json‎

Lines changed: 172 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,172 @@
1+
{
2+
"attributes": {
3+
"altitude-m": {
4+
"description": "Observed altitude in meters (reference according to the chosen profile).",
5+
"disable_correlation": true,
6+
"misp-attribute": "float",
7+
"ui-priority": 96
8+
},
9+
"auth-claim": {
10+
"description": "Identity assurance hint associated with the RID data (for example DRIP or local signature checks).",
11+
"disable_correlation": true,
12+
"misp-attribute": "text",
13+
"ui-priority": 83,
14+
"values_list": [
15+
"none",
16+
"unsigned",
17+
"signature-present-unverified",
18+
"signature-verified",
19+
"drip-end-entity-present",
20+
"other"
21+
]
22+
},
23+
"broadcast-tech": {
24+
"description": "Physical broadcast technology used by direct RID.",
25+
"disable_correlation": true,
26+
"misp-attribute": "text",
27+
"ui-priority": 91,
28+
"values_list": [
29+
"Wi-Fi NAN",
30+
"Wi-Fi Beacon",
31+
"Bluetooth 4 Legacy",
32+
"Bluetooth 5 Extended",
33+
"other"
34+
]
35+
},
36+
"comment": {
37+
"description": "Free-text analyst notes about this observation.",
38+
"disable_correlation": true,
39+
"misp-attribute": "comment",
40+
"ui-priority": 70
41+
},
42+
"confidence": {
43+
"description": "Analyst confidence score from 0 to 100 for correctness and attribution of the RID observation.",
44+
"disable_correlation": true,
45+
"misp-attribute": "float",
46+
"ui-priority": 81
47+
},
48+
"emergency-status": {
49+
"description": "Emergency or abnormal status reported by RID.",
50+
"disable_correlation": true,
51+
"misp-attribute": "text",
52+
"ui-priority": 84,
53+
"values_list": [
54+
"none",
55+
"lost-link",
56+
"low-battery",
57+
"navigation-failure",
58+
"collision-avoidance-active",
59+
"operator-emergency",
60+
"other"
61+
]
62+
},
63+
"heading-deg": {
64+
"description": "Observed heading in degrees (0-359).",
65+
"disable_correlation": true,
66+
"misp-attribute": "float",
67+
"ui-priority": 94
68+
},
69+
"height-reference": {
70+
"description": "Reference used for the reported height or altitude.",
71+
"disable_correlation": true,
72+
"misp-attribute": "text",
73+
"ui-priority": 85,
74+
"values_list": [
75+
"takeoff-point",
76+
"ground-level",
77+
"mean-sea-level",
78+
"other"
79+
]
80+
},
81+
"latitude": {
82+
"description": "Observed drone latitude in decimal degrees (WGS84).",
83+
"disable_correlation": true,
84+
"misp-attribute": "float",
85+
"ui-priority": 98
86+
},
87+
"longitude": {
88+
"description": "Observed drone longitude in decimal degrees (WGS84).",
89+
"disable_correlation": true,
90+
"misp-attribute": "float",
91+
"ui-priority": 97
92+
},
93+
"observation-time": {
94+
"description": "Timestamp when the direct remote identification broadcast was observed.",
95+
"disable_correlation": true,
96+
"misp-attribute": "datetime",
97+
"ui-priority": 100
98+
},
99+
"operator-id": {
100+
"description": "Operator identifier if present in the RID data.",
101+
"misp-attribute": "text",
102+
"ui-priority": 82
103+
},
104+
"operator-latitude": {
105+
"description": "Operator or control-station latitude when available in the RID message.",
106+
"disable_correlation": true,
107+
"misp-attribute": "float",
108+
"ui-priority": 93
109+
},
110+
"operator-longitude": {
111+
"description": "Operator or control-station longitude when available in the RID message.",
112+
"disable_correlation": true,
113+
"misp-attribute": "float",
114+
"ui-priority": 92
115+
},
116+
"raw-message": {
117+
"description": "Raw RID payload or decoded fragment for forensic re-processing.",
118+
"disable_correlation": true,
119+
"misp-attribute": "text",
120+
"multiple": true,
121+
"ui-priority": 87
122+
},
123+
"receiver-id": {
124+
"description": "Identifier of the sensor, handset, or probe collecting this RID observation.",
125+
"misp-attribute": "text",
126+
"ui-priority": 88
127+
},
128+
"rid-standard-profile": {
129+
"description": "Regulatory or technical profile used by the observed broadcast RID message.",
130+
"disable_correlation": true,
131+
"misp-attribute": "text",
132+
"ui-priority": 90,
133+
"values_list": [
134+
"ASTM F3411",
135+
"ASTM F3586 / FAA Part 89 MoC",
136+
"EU EN 4709-002",
137+
"EU 2019/945 + 2019/947",
138+
"IETF DRIP-enhanced",
139+
"other"
140+
]
141+
},
142+
"session-id": {
143+
"description": "Session or message set identifier used to correlate RID messages belonging to the same flight.",
144+
"misp-attribute": "text",
145+
"ui-priority": 80
146+
},
147+
"speed-mps": {
148+
"description": "Observed horizontal speed in meters per second.",
149+
"disable_correlation": true,
150+
"misp-attribute": "float",
151+
"ui-priority": 95
152+
},
153+
"uas-id": {
154+
"description": "Unmanned aircraft identifier as observed in the RID payload (serial number, CAA-issued identifier, or equivalent).",
155+
"misp-attribute": "text",
156+
"ui-priority": 99
157+
}
158+
},
159+
"description": "Simple direct remote identification (RID) observation object for drones/UAS, covering common ASTM/FAA and EU broadcast fields with optional DRIP-oriented identity assurance hints.",
160+
"meta-category": "transport",
161+
"name": "drone-rid-observation",
162+
"required": [
163+
"observation-time"
164+
],
165+
"requiredOneOf": [
166+
"uas-id",
167+
"operator-id",
168+
"session-id"
169+
],
170+
"uuid": "cb36a578-feb2-4516-a57b-b2b3f23e6029",
171+
"version": 1
172+
}

0 commit comments

Comments
 (0)