Esc

Network Isolation

D3-NI
D3-NI (Network Isolation)

Definition

Network Isolation techniques prevent network hosts from accessing non-essential system network resources.

loading...
json

Technique Subclasses

There are 14 techniques in this category, Network Isolation.

Name ID Definition Synonyms
Network Isolation D3-NI Network Isolation techniques prevent network hosts from accessing non-essential system network resources.
- Network Traffic Filtering D3-NTF Restricting network traffic originating from any location.
- Outbound Traffic Filtering D3-OTF Restricting network traffic originating from a private host or enclave destined towards untrusted networks.
- Broadcast Domain Isolation D3-BDI Broadcast isolation restricts the number of computers a host can contact on their LAN. Network Segmentation
- DNS Allowlisting D3-DNSAL Permitting only approved domains and their subdomains to be resolved. DNS Whitelisting
- DNS Denylisting D3-DNSDL Blocking DNS Network Traffic based on criteria such as IP address, domain name, or DNS query type. DNS Blacklisting
- Encrypted Tunnels D3-ET Encrypted encapsulation of routable network traffic.
- Forward Resolution Domain Denylisting D3-FRDDL Blocking a lookup based on the query's domain name value. Forward Resolution Domain Blacklisting
- Forward Resolution IP Denylisting D3-FRIDL Blocking a DNS lookup's answer's IP address value. Forward Resolution IP Blacklisting
- Inbound Traffic Filtering D3-ITF Restricting network traffic originating from untrusted networks destined towards a private host or enclave.
- Hierarchical Domain Denylisting D3-HDDL Blocking the resolution of any subdomain of a specified domain name. Hierarchical Domain Blacklisting
- Homoglyph Denylisting D3-HDL Blocking DNS queries that are deceptively similar to legitimate domain names. Homoglyph Blacklisting
- Reverse Resolution IP Denylisting D3-RRID Blocking a reverse lookup based on the query's IP address value. Reverse Resolution IP Blacklisting
- Email Filtering D3-EF Filtering incoming email traffic based on specific criteria.
loading...

A knowledge graph of cybersecurity countermeasures