MITRE ATT&CKmitigation
M0814 Static Network Configuration
- Domain
- ics
- Version
- 1.2
- Created
- 2019-06-06
Description
Configure hosts and devices to use static network configurations when possible, protocols that require dynamic discovery/addressing (e.g., ARP, DHCP, DNS) can be used to manipulate network message forwarding and enable various AiTM attacks. This mitigation may not always be usable due to limited device features or challenges introduced with different network configurations.
Related
Mitigates · MITRE ATT&CK (11)
- T0846.001 Port Scan sub-technique
- T0846.002 Broadcast Discovery sub-technique
- T0846.003 Multicast Discovery sub-technique
- T1691 Block Operational Technology Message technique
- T1691.001 Command Message sub-technique
- T1691.002 Reporting Message sub-technique
- T0888 Remote System Information Discovery technique
- T0830 Adversary-in-the-Middle technique
- T0842 Network Sniffing technique
- T0846 Remote System Discovery technique
- T0878 Alarm Suppression technique