MITRE ATT&CKmitigation

M0930 Network Segmentation

Published 2019-06-10 Modified 2026-05-12 Official page ↗
Domain
ics
Version
1.1
Created
2019-06-10

Description

Architect sections of the network to isolate critical systems, functions, or resources. Use physical and logical segmentation to prevent access to potentially sensitive systems and information. Use a DMZ to contain any internet-facing services that should not be exposed from the internal network. Restrict network access to only required systems and services. In addition, prevent systems from other networks or business functions (e.g., enterprise) from accessing critical process control systems. For example, in IEC 62443, systems within the same secure level should be grouped into a zone, and access to that zone is restricted by a conduit, or mechanism to restrict data flows between zones by segmenting the network.

Related

Mitigates · MITRE ATT&CK (39)

  • T0843.001 Download All sub-technique
  • T0843.002 Online Edit sub-technique
  • T0843.003 Program Append sub-technique
  • T0846.001 Port Scan sub-technique
  • T0846.002 Broadcast Discovery sub-technique
  • T0846.003 Multicast Discovery sub-technique
  • T1692 Unauthorized Message technique
  • T1692.001 Command Message sub-technique
  • T1692.002 Reporting Message sub-technique
  • T1693 Modify Firmware technique
  • T1693.001 System Firmware sub-technique
  • T1693.002 Module Firmware sub-technique
  • T1695 Block Communications technique
  • T1695.001 Serial COM sub-technique
  • T1695.002 Ethernet sub-technique
  • T1695.003 Wi-Fi sub-technique
  • T0864 Transient Cyber Asset technique
  • T0886 Remote Services technique
  • T0800 Activate Firmware Update Mode technique
  • T0802 Automated Collection technique
  • T0806 Brute Force I/O technique
  • T0816 Device Restart/Shutdown technique
  • T0819 Exploit Public-Facing Application technique
  • T0822 External Remote Services technique
  • T0830 Adversary-in-the-Middle technique
  • T0838 Modify Alarm Settings technique
  • T0842 Network Sniffing technique
  • T0843 Program Download technique
  • T0845 Program Upload technique
  • T0848 Rogue Master technique
Show all 39 ›

References