MITRE D3FENDdefensive technique
D3-DNL Directional Network Link
- Tactic
- Isolate
Definition
Enforce one-way network communication by preventing two-way communication.
How it works
How it works
Using a device such as a data diode, or otherwise enforcing unidirectional (one-way) network communication / data transfer, to physically prevent signals from traveling in the reverse direction.
Unidirectional network link enforcement is a security measure used to separate control and safety systems in operational technology (OT) environments. By employing physical data diodes, this approach ensures one-way communication, allowing information from safety systems to be viewed without permitting any modification or interference, thereby protecting the integrity of the safety system.
Related
Child of · MITRE D3FEND (1)
- D3-NI Network Isolation defensive technique
References
- https://patents.google.com/patent/US8068415B2 Secure one-way data transfer using communication interface circuitry