MITRE D3FENDdefensive technique
D3-BDI Broadcast Domain Isolation
- Tactic
- Isolate
- Synonyms
- Network Segmentation
Definition
Broadcast isolation restricts the number of computers a host can contact on their LAN.
How it works
How it works
Software Defined Networking, or other network encapsulation technologies intercept host broadcast traffic then route it to a specified destination per a configured policy.
This can be implemented within hypervisors, networking hardware (WAPs, switches, routers), or virtual hardware.
Considerations
This technique is highly dependent on network infrastructure and networking requirements.
Related
Child of · MITRE D3FEND (1)
- D3-NI Network Isolation defensive technique
References
- https://patents.google.com/patent/US5920699A Broadcast isolation and level 3 network switch
- https://patents.google.com/patent/US20120331142A1 Private virtual local area network isolation