MITRE ATT&CKmitigation
M0931 Network Intrusion Prevention
- Domain
- ics
- Version
- 1.1
- Created
- 2019-06-10
Description
Use intrusion detection signatures to block traffic at network boundaries. In industrial control environments, network intrusion prevention should be configured so it will not disrupt protocols and communications responsible for real-time functions related to control or safety.
Related
Mitigates · MITRE ATT&CK (10)
- T0869.001 DNS sub-technique
- T0869.002 Publish/Subscribe Protocols sub-technique
- T0846.001 Port Scan sub-technique
- T0830 Adversary-in-the-Middle technique
- T0863 User Execution technique
- T0865 Spearphishing Attachment technique
- T0867 Lateral Tool Transfer technique
- T0869 Standard Application Layer Protocol technique
- T0884 Connection Proxy technique
- T0885 Commonly Used Port technique