Developer Portal
Framework Mappings
Real IDs, on real rules.
Framework mapping is readiness, not certification. Standards inform — HAIEC evaluates. Every badge below is a published framework identifier bound to a shipped detection rule; nothing is fabricated.
Mapping coverage
MITRE ATLAS
Adversarial ML tactics & techniques (AML.T…)
OWASP ASI
OWASP Agentic Top 10 categories (ASI01–ASI10)
NIST AI RMF
AI Risk Management Framework functions
O-RAN WG11
O-RAN security threat model IDs
STIX 2.1
Export object type for SOC interoperability
86
mapped rules
24
with ATLAS IDs
80
with NIST AI RMF
55
with OWASP ASI
21
with telecom refs
| Rule | Framework mappings |
|---|---|
| AR-01 | ATLAS AML.T0051ATLAS AML.T0051.001ASI ASI01NIST MEASURENIST MANAGESTIX Indicator |
| AR-02 | ATLAS AML.T0060ASI ASI02ASI ASI04NIST MAPNIST MANAGESTIX Indicator |
| AR-03 | ASI ASI03NIST GOVERNNIST MANAGESTIX Indicator |
| AR-04 | ATLAS AML.T0055ASI ASI08NIST MEASURENIST MANAGESTIX Indicator |
| AR-05 | ATLAS AML.T0055ASI ASI08NIST MEASURESTIX Indicator |
| AR-06 | ASI ASI04NIST MAPNIST MEASURESTIX Indicator |
| AR-07 | ASI ASI04NIST MAPNIST MANAGESTIX Indicator |
| AR-08 | ATLAS AML.T0051ATLAS AML.T0051.000ASI ASI01NIST MAPNIST MEASURESTIX Indicator |
| AR-09 | ATLAS AML.T0058ASI ASI09ASI ASI10NIST GOVERNNIST MANAGESTIX Indicator |
| AR-10 | ASI ASI02NIST MEASURESTIX Indicator |
| AR-11 | ASI ASI02NIST MEASURESTIX Indicator |
| AR-12 | ASI ASI03NIST GOVERNSTIX Indicator |
| AR-13 | ATLAS AML.T0051ATLAS AML.T0051.000ASI ASI05NIST MEASURENIST MANAGESTIX Indicator |
| AR-14 | ASI ASI02NIST MEASURESTIX Indicator |
| AR-15 | ASI ASI09NIST MEASURESTIX Indicator |
| AR-16 | ASI ASI02NIST MEASURENIST MANAGESTIX Indicator |
| AR-17 | ASI ASI03NIST GOVERNNIST MANAGESTIX Indicator |
| AR-18 | ASI ASI02NIST MEASURENIST MANAGESTIX Indicator |
| AR-19 | ASI ASI10NIST MAPNIST MANAGESTIX Indicator |
| AR-20 | ASI ASI02ASI ASI04NIST MANAGESTIX Indicator |
| AR-21 | ASI ASI10NIST MEASURENIST MANAGESTIX Indicator |
| AR-22 | ATLAS AML.T0051ATLAS AML.T0051.000ATLAS AML.T0054ASI ASI01NIST MEASURENIST MANAGESTIX Indicator |
| AR-23 | ATLAS AML.T0055ATLAS AML.T0051.001ASI ASI06NIST MAPNIST MEASURESTIX Indicator |
| AR-24 | ATLAS AML.T0055ASI ASI06NIST MEASURENIST MANAGESTIX Indicator |
| AR-25 | ATLAS AML.T0058ASI ASI07ASI ASI08NIST MEASURENIST MANAGESTIX Indicator |
| AR-26 | ATLAS AML.T0056ATLAS AML.T0057ATLAS AML.T0060ASI ASI02ASI ASI04NIST MAPNIST MANAGESTIX Indicator |
| AR-27 | ATLAS AML.T0059ASI ASI05NIST MANAGESTIX Indicator |
| AR-28 | ASI ASI08NIST MEASURENIST MANAGESTIX Indicator |
| AR-29 | ASI ASI03NIST GOVERNNIST MANAGESTIX Indicator |
| AR-30 | ASI ASI10NIST MEASURESTIX Indicator |
| AR-31 | ATLAS AML.T0054ASI ASI01NIST GOVERN-1.1WG11 T-rApp-04STIX Indicator |
| AR-32 | ATLAS AML.T0054ASI ASI01NIST GOVERN-1.1WG11 T-rApp-04STIX Indicator |
| AR-33 | ATLAS AML.T0054ASI ASI01NIST GOVERN-1.1WG11 T-rApp-04STIX Indicator |
| AR-34 | ATLAS AML.T0054ASI ASI01NIST GOVERN-1.1WG11 T-rApp-04STIX Indicator |
| AR-35 | ATLAS AML.T0054ASI ASI01NIST GOVERN-1.1WG11 T-rApp-04STIX Indicator |
| AR-36 | STIX Indicator3GPP TS 29.5003GPP TS 29.510 |
| AR-37 | STIX Indicator3GPP TS 29.500 |
| AR-38 | STIX Indicator3GPP TS 29.5003GPP TS 29.571 |
| AR-39 | STIX Indicator3GPP TS 29.5003GPP TS 23.501 |
| AR-40 | STIX Indicator3GPP TS 29.510 |
| AR-41 | STIX Indicator3GPP TS 29.5103GPP TS 33.501 |
| AR-42 | ASI ASI07NIST GOVERN-4.2STIX Indicator3GPP TS 28.5303GPP TS 23.501 |
| AR-43 | ASI ASI07NIST GOVERN-4.2STIX Indicator3GPP TS 28.541 |
| AR-44 | ASI ASI07NIST GOVERN-4.2STIX Indicator3GPP TS 28.554 |
| AR-45 | ASI ASI07NIST GOVERN-4.2STIX Indicator3GPP TS 28.554 |
| AR-46 | ASI ASI07NIST GOVERN-4.2STIX Indicator3GPP TS 28.533 |
| AR-47 | ATLAS AML.T0043NIST MAP-2.3NIST MEASURE-2.7STIX Indicator |
| AR-48 | ATLAS AML.T0015NIST MEASURE-2.7STIX Indicator |
| AR-49 | ATLAS AML.T0018NIST MEASURE-2.7STIX Indicator |
| AR-50 | ATLAS AML.T0018NIST MEASURE-2.7STIX Indicator |
| AR-51 | ATLAS AML.T0040NIST MAP-2.3STIX Indicator |
| AR-52 | ATLAS AML.T0043NIST MAP-2.3STIX Indicator |
| AR-53 | NIST MAP-2.3NIST MEASURE-2.7STIX Indicator |
| AR-54 | ASI ASI03NIST GOVERN-1.2STIX IndicatorIETF RFC 8693 |
| AR-55 | ASI ASI03NIST GOVERN-1.2STIX IndicatorIETF RFC 8693 |
| AR-56 | ASI ASI03NIST GOVERN-1.2STIX IndicatorIETF RFC 8693 |
| AR-57 | ASI ASI03NIST GOVERN-1.2STIX Indicator |
| AR-58 | ASI ASI03NIST GOVERN-1.2STIX IndicatorIETF RFC 8693 |
| AR-59 | ASI ASI03NIST GOVERN-1.1STIX IndicatorIETF RFC 7643 |
| AR-60 | ASI ASI03NIST GOVERN-1.1STIX IndicatorIETF RFC 6749 |
| AR-61 | ASI ASI03NIST GOVERN-1.1STIX IndicatorSPIFFE SPIFFE-ID |
| AR-62 | ASI ASI03NIST GOVERN-1.1STIX IndicatorIETF RFC 8693 |
| AR-63 | ASI ASI03NIST GOVERN-1.1STIX IndicatorIETF RFC 6749 |
| AR-64 | ASI ASI03NIST GOVERN-1.1STIX IndicatorIETF RFC 7643 |
| AR-65 | ASI ASI03NIST GOVERN-1.1STIX Indicator |
| AR-66 | ASI ASI04NIST MANAGE-2.3STIX IndicatorSBOM CycloneDXSBOM SPDX |
| AR-67 | ASI ASI04NIST MANAGE-2.3STIX IndicatorSBOM CycloneDX VEXSBOM OpenVEX |
| AR-68 | ASI ASI04NIST MANAGE-2.3STIX IndicatorSBOM CycloneDXSBOM in-toto |
| AR-69 | NIST MANAGE-2.4STIX Indicator3GPP TS 38.3003GPP TS 23.502 |
| AR-70 | NIST MANAGE-2.4STIX Indicator3GPP TS 38.3003GPP TS 23.502 |
| AR-71 | NIST MANAGE-2.4STIX Indicator3GPP TS 23.5023GPP TS 33.501 |
| AR-72 | NIST MANAGE-2.4STIX Indicator3GPP TS 23.502 |
| AR-73 | NIST MANAGE-2.4STIX Indicator3GPP TS 33.501 |
| AR-74 | NIST MANAGE-2.3STIX IndicatorSBOM CycloneDXSBOM SPDX |
| AR-75 | NIST MANAGE-2.3STIX IndicatorSBOM in-totoSBOM SPDX |
| AR-76 | NIST MANAGE-2.3STIX IndicatorSBOM CycloneDXSBOM SPDX |
| AR-77 | NIST MANAGE-2.3STIX IndicatorSBOM in-toto |
| AR-78 | NIST MANAGE-2.3STIX IndicatorSBOM CycloneDXSBOM SPDX |
| AR-79 | NIST MANAGE-2.4STIX Indicator |
| AR-80 | NIST MANAGE-2.4STIX Indicator |
| AR-81 | NIST MANAGE-2.4STIX Indicator |
| AR-82 | NIST MANAGE-2.4STIX Indicator |
| AR-83 | NIST MANAGE-2.4STIX Indicator |
| AR-84 | NIST MANAGE-2.4STIX IndicatorIETF RFC 6749 |
| AR-85 | NIST MANAGE-2.4STIX Indicator |
| AR-86 | NIST MANAGE-2.4STIX IndicatorIETF RFC 8693 |
Source of truth: lib/ai-security/frameworks/framework-mappings.ts. A rule with no mapping carries no badge — absence is never rendered as coverage. HAIEC supplies evidence and analysis; qualified assessors retain professional judgment.