MITRE D3FENDdefensive technique

D3-OVAR OT Variable Access Restriction

Official page ↗
Tactic
Isolate
Synonyms
OT Variable Access Policy

Definition

Assign read/write access controls on designated registers or data tags to prevent unauthorized writes.

How it works

## How it works Many OT Controllers and OT Communication Modules enable Read-Only or Read/Write access on a per-tag basis. As an example, when configuring OT process tags which can be accessed using the Modbus protocol, configure the tag to a Modbus Input Register to leverage the protocol's registry ranges, restricting the ability of external sources to modify data. In Siemens, each data block (DB) tag can be configured as "data block write-protected in the device."

Related

Counters · MITRE ATT&CK (7)

  • T0801 Monitor Process State technique
  • T0806 Brute Force I/O technique
  • T0809 Data Destruction technique
  • T0835 Manipulate I/O Image technique
  • T0836 Modify Parameter technique
  • T0861 Point & Tag Identification technique
  • T0877 I/O Image technique

Child of · MITRE D3FEND (1)

  • D3-AMED Access Mediation defensive technique

References