Agent Authentication
Agent authentication is the process of verifying the identities of agents to ensure they are authorized and trustworthy participants within a system.
0 NIST0 mitigations38 inferred
Open technique →MITRE D3FEND™ Learning Center
Harden
The harden tactic is used to increase the opportunity cost of computer network exploitation. Hardening differs from Detection in that it generally is conducted before a system is online and operational.
55Techniques
6Top-level families
Top-level technique families
Start with the major branches.
These techniques sit directly beneath the Defensive Technique root and organize the more specific techniques in this tactic.
D3-AA
Agent Authentication
Agent authentication is the process of verifying the identities of agents to ensure they are authorized and trustworthy participants within a system.
5 direct child techniques →D3-AHApplication Hardening
Application Hardening makes an executable application more resilient to a class of exploits which either introduce new code or execute unwanted existing code. These techniques may be applied at compile-time or on an application binary.
8 direct child techniques →D3-CHCredential Hardening
Credential Hardening techniques modify system or network properties in order to protect system or network/domain credentials.
4 direct child techniques →D3-MHMessage Hardening
The application of security controls to user-to-user and system-to-system communications so messages remain confidential, unaltered, and verifiable while resisting injection, replay, and tampering.
3 direct child techniques →D3-PHPlatform Hardening
Hardening components of a Platform with the intention of making them more difficult to exploit. Platforms includes components such as: * BIOS UEFI Subsystems * Hardware security devices such as Trusted Platform Modules * Boot process logic or code * Kernel software components
10 direct child techniques →D3-SCHSource Code Hardening
Hardening source code with the intention of making it more difficult to exploit and less error prone.
8 direct child techniques →Complete tactic directory
Browse all 55 Harden techniques.
48 of 55 techniques shown
Application Configuration Hardening
Modifying an application's configuration to reduce its attack surface.
1 NIST3 mitigations4 inferred
Open technique →Application Hardening
Application Hardening makes an executable application more resilient to a class of exploits which either introduce new code or execute unwanted existing code. These techniques may be applied at compile-time or on an application binary.
2 NIST1 mitigations16 inferred
Open technique →Biometric Authentication
Using biological measures in order to authenticate a user.
0 NIST0 mitigations17 inferred
Open technique →Bootloader Authentication
Cryptographically authenticating the bootloader software before system boot.
0 NIST2 mitigations1 inferred
Open technique →Bus Message Authentication
Applies cryptographic primitives to individual bus frames to verify the sender's identity and ensure the integrity of the data payload.
0 NIST0 mitigations0 inferred
Open technique →Certificate Pinning
Persisting either a server's X.509 certificate or their public key and comparing that to server's presented identity to allow for greater client confidence in the remote server's identity for SSL connections.
0 NIST1 mitigations1 inferred
Open technique →Certificate Rotation
Certificate rotation involves replacing digital certificates and their private keys to maintain cryptographic integrity and trust, mitigating key compromise risks and ensuring continuous secure communications.
0 NIST0 mitigations21 inferred
Open technique →Certificate-based Authentication
Requiring a digital certificate in order to authenticate a user.
0 NIST0 mitigations18 inferred
Open technique →Change Default Password
Changing the default password means replacing the factory-set credentials with a strong, unique password before the device is deployed, preventing unauthorized access.
0 NIST0 mitigations20 inferred
Open technique →Control Flow Integrity
Enforcing legal control flow transfers during application process execution.
0 NIST0 mitigations0 inferred
Open technique →Credential Hardening
Credential Hardening techniques modify system or network properties in order to protect system or network/domain credentials.
0 NIST0 mitigations38 inferred
Open technique →Credential Rotation
Credential rotation is a security procedure in which authentication credentials, such as passwords, API keys, or certificates, are regularly changed or replaced to minimize the risk of unauthorized access.
0 NIST0 mitigations21 inferred
Open technique →Credential Scrubbing
The systematic removal of hard-coded credentials from source code to prevent accidental exposure and unauthorized access.
0 NIST0 mitigations1 inferred
Open technique →Dead Code Elimination
Removing unreachable or "dead code" from compiled source code.
0 NIST0 mitigations0 inferred
Open technique →Disable Remote Access
Limiting access to a computing device which is not required through or from a non-organization-controlled network.
0 NIST0 mitigations4 inferred
Open technique →Disk Encryption
Encrypting a hard disk partition to prevent cleartext access to a file system.
0 NIST1 mitigations2 inferred
Open technique →Domain Logic Validation
Validation of variable state in the context of the domain application.
0 NIST0 mitigations1 inferred
Open technique →Driver Load Integrity Checking
Ensuring the integrity of drivers loaded during initialization of the operating system.
2 NIST3 mitigations0 inferred
Open technique →Electromagnetic Radiation Hardening
The application of physical and material-level design measures to electronic systems, components, or facilities to reduce their susceptibility to damage or disruption from electromagnetic threats.
0 NIST0 mitigations11 inferred
Open technique →Exception Handler Pointer Validation
Validates that a referenced exception handler pointer is a valid exception handler.
0 NIST1 mitigations0 inferred
Open technique →File Encryption
Encrypting a file using a cryptographic key.
0 NIST1 mitigations99 inferred
Open technique →Hardware-based Write Protection
Physical methods of preventing data from being written to computer storage.
0 NIST0 mitigations1 inferred
Open technique →Integer Range Validation
Ensuring that an integer is within a valid range.
0 NIST0 mitigations0 inferred
Open technique →Memory Block Start Validation
Ensuring that a pointer accurately references the beginning of a designated memory block.
0 NIST0 mitigations0 inferred
Open technique →Message Authentication
Authenticating the sender of a message and ensuring message integrity.
1 NIST0 mitigations0 inferred
Open technique →Message Encryption
Encrypting a message body using a cryptographic key.
0 NIST1 mitigations0 inferred
Open technique →Message Hardening
The application of security controls to user-to-user and system-to-system communications so messages remain confidential, unaltered, and verifiable while resisting injection, replay, and tampering.
0 NIST0 mitigations0 inferred
Open technique →Multi-factor Authentication
Requiring proof of two or more pieces of evidence in order to authenticate a user.
4 NIST1 mitigations37 inferred
Open technique →Null Pointer Checking
Checking if a pointer is NULL.
0 NIST0 mitigations0 inferred
Open technique →One-time Password
A one-time password is valid for only one user authentication.
0 NIST1 mitigations20 inferred
Open technique →Operational Logic Validation
Validation of variable state in the context of the control logic of the operational application.
0 NIST0 mitigations0 inferred
Open technique →Password Authentication
Password authentication is a security mechanism used to verify the identity of a user or entity attempting to access a system or resource by requiring the input of a secret string of characters, known as a password, that is associated with the user or entity.
0 NIST0 mitigations20 inferred
Open technique →Password Rotation
Password rotation is a security policy that mandates the periodic change of user account passwords to mitigate the risk of unauthorized access due to compromised credentials.
0 NIST0 mitigations20 inferred
Open technique →Physical Enclosure Hardening
Physical changes to a computer enclosure which reduce the ability for agents or the environment to affect the contained computer system.
0 NIST0 mitigations0 inferred
Open technique →Platform Hardening
Hardening components of a Platform with the intention of making them more difficult to exploit. Platforms includes components such as: * BIOS UEFI Subsystems * Hardware security devices such as Trusted Platform Modules * Boot process logic or code * Kernel software components
5 NIST1 mitigations139 inferred
Open technique →Pointer Authentication
Comparing the cryptographic hash or derivative of a pointer's value to an expected value.
0 NIST0 mitigations0 inferred
Open technique →Pointer Validation
Ensuring that a pointer variable has the required properties for use.
0 NIST0 mitigations0 inferred
Open technique →Process Segment Execution Prevention
Preventing execution of any address in a memory region other than the code segment.
0 NIST2 mitigations12 inferred
Open technique →Radiation Hardening
Radiation hardening is the process of making electronic components and circuits resistant to damage or malfunction caused by high levels of ionizing radiation.
0 NIST0 mitigations11 inferred
Open technique →Reference Nullification
Invalidating all pointers that reference a specific memory block, ensuring that the block cannot be accessed or modified after deallocation.
0 NIST0 mitigations0 inferred
Open technique →RF Shielding
Adding physical barriers to a platform to prevent undesired radio interference.
0 NIST0 mitigations11 inferred
Open technique →Segment Address Offset Randomization
Randomizing the base (start) address of one or more segments of memory during the initialization of a process.
0 NIST0 mitigations12 inferred
Open technique →Software Update
Replacing old software on a computer system component.
8 NIST1 mitigations26 inferred
Open technique →Source Code Hardening
Hardening source code with the intention of making it more difficult to exploit and less error prone.
0 NIST0 mitigations1 inferred
Open technique →Stack Frame Canary Validation
Comparing a value stored in a stack frame with a known good value in order to prevent or detect a memory segment overwrite.
0 NIST0 mitigations5 inferred
Open technique →Strong Password Policy
Modifying system configuration to increase password strength.
0 NIST2 mitigations20 inferred
Open technique →System Configuration Permissions
Restricting system configuration modifications to a specific user or group of users.
11 NIST2 mitigations13 inferred
Open technique →Token Binding
Token binding is a security mechanism used to enhance the protection of tokens, such as cookies or OAuth tokens, by binding them to a specific connection.
0 NIST0 mitigations20 inferred
Open technique →Token-based Authentication
Token-based authentication is an authentication protocol where users verify their identity in exchange for a unique access token. Users can then access the website, application, or resource for the life of the token without having to re-enter their credentials.
0 NIST0 mitigations24 inferred
Open technique →TPM Boot Integrity
Assuring the integrity of a platform by demonstrating that the boot process starts from a trusted combination of hardware and software and continues until the operating system has fully booted and applications are running. Sometimes called Static Root of Trust Measurement (STRM).
0 NIST1 mitigations0 inferred
Open technique →Transfer Agent Authentication
Validating that server components of a messaging infrastructure are authorized to send a particular message.
0 NIST0 mitigations0 inferred
Open technique →Trusted Library
A trusted library is a collection of pre-verified and secure code modules or components that are used within software applications to perform specific functions. These libraries are considered reliable and have been vetted for security vulnerabilities, ensuring they do not introduce risks into the application.
0 NIST0 mitigations1 inferred
Open technique →Variable Initialization
Setting variables to a known value before use.
0 NIST0 mitigations1 inferred
Open technique →Variable Type Validation
Ensuring that a variable has the correct type.
0 NIST0 mitigations0 inferred
Open technique →No matching techniques
Try a shorter term or clear the filters.