Network disconnect applies to internal and external networks. Terminating network connections associated with specific communications sessions includes de-allocating TCP/IP address or port pairs at the operating system level and de-allocating the networking assignments at the application level if multiple application sessions are using a single operating system-level network connection. Periods of inactivity may be established by organizations and include time periods by type of network access or for specific network accesses.
Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name |
---|---|---|---|---|
SC-10 | Network Disconnect | Protects | T1071 | Application Layer Protocol |
SC-10 | Network Disconnect | Protects | T1071.001 | Web Protocols |
SC-10 | Network Disconnect | Protects | T1071.002 | File Transfer Protocols |
SC-10 | Network Disconnect | Protects | T1071.003 | Mail Protocols |
SC-10 | Network Disconnect | Protects | T1071.004 | DNS |