MITRE D3FENDdefensive technique

D3-DNL Directional Network Link

Official page ↗
Tactic
Isolate

Definition

Enforce one-way network communication by preventing two-way communication.

How it works

How it works Using a device such as a data diode, or otherwise enforcing unidirectional (one-way) network communication / data transfer, to physically prevent signals from traveling in the reverse direction. Unidirectional network link enforcement is a security measure used to separate control and safety systems in operational technology (OT) environments. By employing physical data diodes, this approach ensures one-way communication, allowing information from safety systems to be viewed without permitting any modification or interference, thereby protecting the integrity of the safety system.

Related

Counters · MITRE ATT&CK (2)

  • T0860 Wireless Compromise technique
  • T0887 Wireless Sniffing technique

Child of · MITRE D3FEND (1)

  • D3-NI Network Isolation defensive technique

References