What is Air Gap?

What is Air Gap?

What is Air Gap? Jonathan Poland

An air gap is a computer network that is physically isolated from other networks, including the internet. This isolation is designed to protect the network and the sensitive data it contains from external threats and vulnerabilities. Air gaps are commonly used in a variety of contexts to enhance information security, including in military systems, medical devices, secure facilities such as prisons, and critical infrastructure such as nuclear power plants.

For example, a military system might use an air gap to protect sensitive information from being accessed by external parties, such as foreign governments or cybercriminals. Similarly, a hospital might use an air gap to protect patient data and ensure the integrity and reliability of its medical devices. In these cases, the air gap helps to reduce the risk of information security breaches and ensure that the systems and data are protected from external threats.

Basically, air gaps are a basic and effective approach to protecting systems and information from external threats. By physically isolating networks from other networks, organizations can reduce the risk of information security breaches and protect sensitive data from external vulnerabilities. The following are illustrative examples of an air gap.

Standalone System

An air gap can be implemented as a standalone system with no networking capabilities whatsoever. For example, a medical device that contains a microcontroller but has no interface to connect to the outside world.

Offline Storage

Data storage devices that are only connected to computers that are offline. For example, a professional musician with a vault of unreleased material that is stored on encrypted data storage devices in a recording studio. Such devices are only connected to musical instruments and computing devices that have no connection to the internet or outside networks.

Stand-alone Network

A network that connects local devices without any physical way to connect to the internet or unsecured networks. For example, the human resources team of a small regional bank want to restrict confidential employee data to three machines that have no outside network connection. The three machines are networked together and attached to various data storage devices. The machines in the network and attached devices have no wireless networking capabilities and are not connected by wire to the internet or the office’s local area network.

Large Networks

An air gap network isn’t necessarily contained to one site and can be geographically distributed at a global, regional, city or campus scale. For example, a globally distributed control system for a pipeline that is completely isolated from unsecured networks. Large air gap networks are often challenging to physically secure. For example, wireless or wired communications running great distances may be intercepted or manipulated.

Physical Security

A hydroelectric dam maintains control systems that aren’t networked to the outside world. These systems are physically secured in a management office that can only be accessed by authorized individuals with a variety of security measures in place such as an access control system and security system.

Segregation Of Duties

A hedge fund is developing financial trading algorithms in a small room with no network connections out and advanced physical security measures such as a mantrap. They often use segregation of duties to ensure that no one person can remove or bring in data to the room. For example, any updates to the system involve multiple trusted people that have different roles such that no single person could install a malicious file.

Signal Blocking

A nuclear power station is completely unconnected to any networks. Efforts are made to block wireless networking signals in sensitive areas of the facility.

Hardware Validation

Modern hardware may contain networking capabilities that is not well documented. This may be done to implement functionality such as remote support or software updates. Alternatively, networking capabilities may be built into things for malicious purposes. As such, implementing a secure air gap network requires carefully reviewing any hardware that comes into contact with the system including external storage devices and peripherals such as a keyboard.

Updates

Air gap networks can only be updated by connecting outside data storage devices. This is a high risk operation and is a common way for air gapped systems to be compromised. Updates to air gap networks require a secure end-to-end procedure that includes a chain of trust for the files you are using and segregation of duties that ensure no single person can add malicious files. The security of updates are also completely reliant on the integrity of the data storage hardware used.

Backups

Air gap networks are commonly backed up locally on the air gap network itself. Implementation of secure offsite backups requires a process with all the same elements as an update process including hardware validation, chain of trust and segregation of duties. Physical security for data leaving a facility is also an important consideration.

Learn More
Digital Assets Jonathan Poland

Digital Assets

Digital assets are electronic representations of value that can be traded, stored, and managed using decentralized digital technologies such as…

Price Sensitivity Jonathan Poland

Price Sensitivity

Price sensitivity is a measure of how much the demand for a product or service decreases as the price increases.…

Human Behavior Jonathan Poland

Human Behavior

Behavior is a pattern of actions or reactions that varies depending on factors such as context and mood. It is…

Agile Change Management Jonathan Poland

Agile Change Management

Agile change management is the practice of leading continuous delivery processes in which changes are shipped within weeks. This approach…

Stakeholders Jonathan Poland

Stakeholders

Stakeholders are individuals or groups who have an interest or concern in something, especially a business. For example, in a…

Operating Agreement Jonathan Poland

Operating Agreement

An LLC operating agreement is a legal document that outlines the rules and procedures for a limited liability company, including…

Best Industries for Selling B2G 150 150 Jonathan Poland

Best Industries for Selling B2G

The best industries for companies that want to acquire a government contract or grant are those that are aligned with…

Employability Jonathan Poland

Employability

Employability refers to the value that an employee brings to an employer. It is the collection of attributes, skills, and…

Sales Goals Jonathan Poland

Sales Goals

Sales goals are targets for the revenue or units sold that a sales team or individual is expected to achieve…

Content Database

Search over 1,000 posts on topics across
business, finance, and capital markets.

Technology Theories Jonathan Poland

Technology Theories

A technology theory is a broad idea that has significant implications for technology and its effects on society and culture.…

Self-Assessment Jonathan Poland

Self-Assessment

Self assessment is the process of evaluating one’s own work performance and identifying areas for improvement. This can be a…

Demand Generation Jonathan Poland

Demand Generation

Demand generation is any marketing or sales activity designed to create recognition, awareness and interest in a firm’s brand and…

What is Big Data? Jonathan Poland

What is Big Data?

Big data refers to extremely large and complex datasets that are difficult to process using traditional data processing tools. These…

Adoption Rate Jonathan Poland

Adoption Rate

Adoption rate refers to the speed at which users begin to utilize a new product, service, or feature. It is…

Compliance Risk Jonathan Poland

Compliance Risk

Compliance risk refers to the risk that an organization may face as a result of not complying with laws, regulations,…

Price Umbrella Jonathan Poland

Price Umbrella

A price umbrella is a pricing strategy in which a company sets a high price for a premium product or…

Management Challenges Jonathan Poland

Management Challenges

Management challenges are obstacles, difficulties, or inefficiencies that make it difficult for managers to achieve their goals and objectives. These…

Ideation Jonathan Poland

Ideation

Ideation is the process of generating ideas and solutions to problems. It is a crucial step in the creative process,…