Electronics that are destroyed or disrupted by an electromagnetic pulse, interference or jamming are unavailable however well their software is secured. D3-EMH Electromagnetic Radiation Hardening is the MITRE D3FEND countermeasure for that physical layer. D3FEND defines it as "The application of physical and material-level design measures to electronic systems, components, or facilities to reduce their susceptibility to damage or disruption from electromagnetic threats." It sits in the Harden tactic under Radiation Hardening (D3-RH), itself part of Platform Hardening, and has one child technique, D3-RFS RF Shielding. This card explains the mechanisms, the ATT&CK relationships D3FEND infers and how little weight most of them carry, the protection levels in US government guidance, and how to verify shielding. It is written for facility, OT and data centre engineers and for security architects who own resilience requirements.
Key takeaways
- EM hardening is mainly an availability control. It protects equipment against damage or disruption; it is not a substitute for physical access control or supply chain assurance.
- Define the threat first. D3FEND notes that designs differ greatly between ambient interference, conducted interference on power lines, intentional jamming, high-altitude EMP and ionising radiation.
- Protection comes in levels. The 2019 US EMP Protection and Resilience Guidelines set four levels, from surge protection and spares up to at least 80 dB of shielding through 10 GHz.
- Claims must be tested, then maintained. D3FEND says shielding effectiveness must be validated by standardised testing, and that repairs and re-terminations can open gaps that need re-verification.
- Most inferred ATT&CK links are weak. D3FEND infers them because EMH hardens the Hardware Device artefact; only hardware-related initial access techniques have a plausible practical connection.
D3-EMH at a glance
| Field | D3-EMH Electromagnetic Radiation Hardening |
|---|---|
| D3FEND ID | D3-EMH (synonym: EM Hardening) |
| Tactic | Harden |
| Parent technique | Radiation Hardening (D3-RH), under Platform Hardening |
| Child technique | D3-RFS RF Shielding |
| Digital artefact | Hardware Device (relation: hardens, inherited from D3-RH) |
| D3FEND reference | Patent US20070105445A1, certifiable EMP and RFI protection through shielded containers and rooms |
| ATT&CK relationship in D3FEND | Inferred only, through the Hardware Device artefact (checked November 2026) |
| Main limitation | Effective only against the threats it was designed and tested for, and degrades with maintenance |
How it works
D3FEND describes EM hardening as controlling the coupling path between an electromagnetic threat and sensitive electronics. Energy reaches equipment either radiated through the air or conducted along cables, so hardening works on both paths:
- Enclosures: conductive enclosures attenuate external fields (the Faraday cage effect), and skin-depth shielding dissipates high-frequency fields before they penetrate.
- Interfaces: transient suppression such as surge protectors and ferrite chokes clamps induced voltages where cables enter.
- Components and layout: for high-energy threats such as nuclear EMP or space radiation, radiation-tolerant parts, redundant circuits and layouts that avoid antenna-like structures.
- Layering: D3FEND stresses defence in depth across facility, chassis, board and component, because no single measure is complete.
Threats in scope
| Threat | Source | Typical concern |
|---|---|---|
| Radio frequency and conducted interference | Ambient or nearby equipment, power lines | Errors and resets |
| Intentional electromagnetic interference (IEMI) | Directed energy or jamming devices | Local disruption or damage |
| High-altitude EMP (HEMP) | Nuclear detonation at altitude | CISA calls it the most serious EMP concern, with potential permanent damage to grid and control systems |
| Geomagnetic disturbance (GMD) | Severe space weather | Damage to power systems, satellites and long cables; CISA cites the 1989 storm that cut power to much of Quebec for nearly nine hours |
ATT&CK techniques D3FEND relates to D3-EMH
Relationship type: inferred, experimental. D3FEND lists no direct mapping. Its relationships come from the shared Hardware Device artefact: EMH hardens hardware devices, and the ATT&CK techniques below touch hardware devices or kinds of them, such as removable media and cameras. Checked November 2026; 14 techniques and sub-techniques, grouped by tactic.
| Tactic | Techniques D3FEND relates | Practical relevance (NHI Mgmt Group view) |
|---|---|---|
| Initial Access | T1195 Supply Chain Compromise, T1195.003 Compromise Hardware Supply Chain, T1200 Hardware Additions, T1091 Replication Through Removable Media | Low. Shielded racks and rooms can make unnoticed additions harder, but supply chain and port controls do the real work. |
| Collection | T1125 Video Capture, T1123 Audio Capture, T1025 Data from Removable Media, T1056 Input Capture, T1056.001 Keylogging | Very low; these are host software behaviours. |
| Credential Access | T1056 Input Capture, T1056.001 Keylogging, T1111 Multi-Factor Authentication Interception | Very low. |
| Exfiltration | T1052 Exfiltration Over Physical Medium, T1052.001 Exfiltration over USB | Very low. |
| Lateral Movement and Command and Control | T1091 Replication Through Removable Media, T1092 Communication Through Removable Media | Very low. |
| Discovery | T1619 Cloud Storage Object Discovery | None we can identify; an artefact of the inference. |
For the hardware-related behaviours, see MITRE ATT&CK T1200 Hardware Additions. The honest summary is that EMH protects availability against physical electromagnetic threats, which ATT&CK Enterprise does not model as adversary techniques.
Where it is implemented
The US EMP Protection and Resilience Guidelines for Critical Infrastructure and Equipment (National Coordinating Center for Communications, version 2.2, 5 February 2019) give the most practical structure. They cover HEMP, source region EMP and intentional electromagnetic interference, and define four levels by how long an outage can be tolerated:
| Level | Tolerable outage | Main measures in the guidelines |
|---|---|---|
| 1 | Longer outages | Lightning-rated surge protection on power, antenna and data lines; spares unplugged or in Faraday containers; one week of backup power and supplies |
| 2 | Hours | EMP-rated surge protection, online UPS, fibre or shielded cables with ferrites, protected backup power |
| 3 | Minutes | IEC SC 77C series standards; at least 30 dB shielding through 10 GHz with shielded racks, rooms or facilities; EMP-tested surge devices; hardness maintenance and surveillance |
| 4 | Seconds, life safety | US military EMP standards such as MIL-STD-188-125-1; at least 80 dB shielding through 10 GHz; double-door entries; military validation; ongoing hardness maintenance and surveillance |
The guidelines prefer fibre without metal for cables entering protected areas, waveguide-below-cutoff pipes for ventilation and gasketed doors for shielded rooms. They also state that Level 3 can cost far less than 1% of system cost and Level 4 typically 1% to 5% of new system cost if planned from the start; retrofits cost more.
- Product classes: shielded racks and enclosures, shielded rooms, surge protective devices, power line filters, ferrites, fibre media converters and Faraday storage for spares. Name none in requirements; specify the attenuation and test standard instead.
- Choosing a level: most offices need Level 1 practices only. Control rooms, emergency communications and critical OT sites justify Levels 2 or 3. Level 4 belongs to life safety and national functions. For physical controls around these spaces, see the sibling card D3-PEH Physical Enclosure Hardening.
Implementation steps
- Set the threat scope. Decide which threats from the table apply, per site, and record the tolerable outage for each critical function.
- Pick the protection level. Map each function to a level and its measures; protect a small shielded core (rack or room) rather than every device where that is cheaper, as the guidelines suggest.
- Design the penetrations. Every cable, pipe and vent entering a shield is a path. Use fibre, filters and surge devices at the boundary, and plan cooling with the shield: D3FEND warns sealed enclosures restrict airflow.
- Test before acceptance. Measure shielding effectiveness against the stated target with a recognised method; D3FEND names IEEE 299 and MIL-STD-461 as examples of standardised testing.
- Keep spares and power. Store spares protected and keep backup power and fuel matched to the level.
- Run hardness maintenance. Record every change to shields, doors, gaskets and cable terminations, and re-verify after work, as both D3FEND and the guidelines require.
How to verify it works
- Acceptance testing: shielding effectiveness measured against the design target (for example 30 dB or 80 dB through 10 GHz for Levels 3 and 4), with results kept as evidence.
- Change-triggered retests: any enclosure repair, new cable penetration or door replacement triggers a check of that boundary.
- Periodic surveillance: scheduled inspection of gaskets, door seals, filters and surge devices, with spares on hand.
- Functional exercises: run critical functions on protected backup power and communications to confirm the protected set actually supports operations.
| Metric (examples, not standards) | What it shows |
|---|---|
| Share of critical functions with an assigned protection level | Coverage of the threat assessment |
| Share of shielded spaces with a passing test in the last cycle | Whether claimed protection is current |
| Penetrations added without a recorded retest | Maintenance discipline |
| Surge protective devices past replacement date or tripped | Protection eroding at interfaces |
Limits and failure patterns
- Untested claims: a cabinet sold as shielded is not proof; D3FEND requires standardised testing.
- Shield breached by a cable: one unfiltered copper line through a shielded wall can carry the energy the enclosure blocks.
- Maintenance gaps: re-terminated connectors, propped doors and worn gaskets reduce attenuation without anyone noticing.
- Thermal trade-offs ignored: overheating in a sealed enclosure causes the outage the shield was meant to prevent.
- Protecting equipment but not dependencies: shielded servers still fail without protected power, cooling and communications.
Framework mapping
| Framework | Reference | Relationship to D3-EMH |
|---|---|---|
| NIST SP 800-53 Rev 5 | PE-21 Electromagnetic Pulse Protection | Direct: employ protections against EMP damage for defined systems |
| NIST SP 800-53 Rev 5 | PE-19 Information Leakage | Related: emanations protection uses similar shielding but addresses outbound leakage |
| NIST SP 800-53 Rev 5 | PE-9, PE-11, CP-2 | Power equipment and cabling, emergency power, contingency planning for outages |
| US EMP Protection and Resilience Guidelines (2019) | Levels 1 to 4 | Practical protection tiers |
| IEC 61000 series and IEC SC 77C | For example IEC 61000-2-9 (HEMP environment) | Commercial HEMP and IEMI standards cited by the guidelines |
Related countermeasures
- Parent: D3-RH Radiation Hardening, covering ionising radiation methods.
- Child: D3-RFS RF Shielding, the radio frequency barrier form of this technique.
- Outbound counterpart: emanations security protects against signals leaking out rather than energy getting in; see the TEMPEST and Electromagnetic Emanations Guide.
Practitioner checklist
- Record which electromagnetic threats apply to each site and the tolerable outage per critical function.
- Assign a protection level to each critical function and document the measures.
- Protect every cable, pipe and vent that crosses a shield boundary.
- Design cooling together with shielding.
- Accept shielding only on test evidence against a stated target and method.
- Retest after any change to enclosures, doors or penetrations.
- Keep protected spares, surge device replacements and backup power matched to the level.
- Exercise critical functions on protected power and communications.
Standards and references
- MITRE D3FEND: Electromagnetic Radiation Hardening (D3-EMH)
- CISA: EMP Protection and Resilience Guidelines for Critical Infrastructure and Equipment
- CISA: Electromagnetic Pulse and Geomagnetic Disturbance
- DHS Science and Technology: Electromagnetic Pulse Shielding Mitigations Best Practice
- NIST: SP 800-53 Rev 5, Security and Privacy Controls
Related NHI Mgmt Group resources: TEMPEST and Electromagnetic Emanations Guide · MITRE ATT&CK T1200 Hardware Additions · PLC Security Guide · MITRE D3FEND Guide