How To Set Up An Air Gap Network

Everything you demand to know about air gapped systems and their security

If you lot follow cyber security for long enough y'all're jump to come beyond the term "air gapped calculator." As it relates to computer networking, air gapping is a security measure to ensure that a computer network is physically isolated from unsecured networks like the internet and local area networks.

The proper name derives from the conceptual air gap that should exist with physical separation.

What is an air gapped calculator?

An air-gapped computer is isolated from unsecured networks, meaning that it is non direct connected to the internet, nor is it connected to any other system that is connected to the cyberspace. A true air gapped computer is likewise physically isolated, meaning data tin but be passed to it physically (via USB, removable media or a firewire with another machine).

Some companies will market that a network or calculator is air gapped despite the fact that the systems are only separated with a software firewall. Exist cautious of this, firewalls tin be breached as a outcome of both security failures and mis-configurations.

A true air gapped computer is physically isolated.

Here'due south a good example from pop civilisation. Practice yous remember the scene from the moving picture Mission Impossible where Tom Cruise rappels downwardly from the ceiling?

what is an air gapped computer?

It's i of the near famous scenes in movie history. In it, Cruise lowers himself from an air vent and dangles just anxiety to a higher place the floor as he steals a listing from a estimator in FBI headquarters.

That is an air gapped estimator.

Who uses air gapped computers/networks?

You will tend to find air gapped computers implemented in high security environments, call up classified military networks and payment networks. Here are some more than examples of networks or systems that might be air gapped:

Military calculator systems and networks
Government estimator systems and networks
Financial computer systems and networks
Industrial control systems:
- SCADA
Life-critical systems:
- Nuclear ability plants
- Aviation Computers:
  - FADECs
  - Avionics
- Medical Equipment

Interestingly, as more and more devices come online and become "smart," a number of products that accept traditionally been air gapped like thermostats, electronic sprinklers and car components are now connecting to the public internet.

Are air gapped computers completely secure?

No. At least not from Tom Cruise. Seriously though, while y'all definitely don't demand to freak out and go find an culling to air gapping, it would be silly to pretend that goose egg can go wrong. Air gapped computers can still exist breached. Granted, it'due south a hell of a lot harder to do when a computer is air gapped, but methods exist.

The easy way to breach an air gapped estimator

Good old fashioned social engineering science. That's right, the easiest way to breach an air gapped computer is to find a human intermediary to wittingly (or maybe unwittingly) breach the figurer. To do this they will demand to access the calculator themselves and attach a USB device like a flash drive or a Wi-Fi dongle.

That'south the easy way.

Other ways to alienation air gapped computers

If you desire to get a bit more scientific, there are other manner channels to extract data from an air gapped computer, they include:

Electromagnetic
Acoustic
Thermal
Optical

Electromagnetic

Electromagnetic channels are the oldest attack vector of the group. These techniques include eavesdropping on EM radiations from the computer's memory omnibus and monitoring leakage from USB ports and cables. Because electromagnetic channels have been widely studied, EM shielding has go a fairly common defensive measure.

Acoustic

Recently, audio-visual channels have become a popular assail vector on account of the proliferation of hackable smartphones that are capable of picking up audio signals that the human ear tin't differentiate from background racket. The nigh cutting-edge area involves the use of ultrasonic audio waves with higher frequencies that are both inaudible and provide greater bandwidth.

Thermal

Unlike the other categories, thermal hacks are more theoretical than annihilation at this point. While they have been demonstrated, the bandwidth is depression, measuring in the low tens of bits per second over a very short distance. It's unclear whether this volition e'er become a applied attack vector.

Optical Manual

The most recent channel to be explored, optical transmission is bolstered by the appearance and widespread availability of hands-hacked surveillance cameras. The cameras include LEDs on almost every arrangement and tin transmit substantial amounts of data.

How difficult is information technology to breach an air gapped calculator?

It's extremely challenging. The mutual theme with all of these attacks is that they require physical proximity. Nosotros're talking virtually being close enough to record Electromagnetic radiation, pick upwardly inaudible sound waves or rappel down from the ceiling.

Beyond that, most of what I've merely described are proof-of-concept attacks. That ways they're all:

Difficult to execute
Contingent upon numerous conditions existence met
Developed by security researchers… for research purposes

That terminal signal is especially salient. These exploits were pulled off primarily to raise awareness, they're not things you are likely to find in the wild. On the flip-side, most cybercriminals don't provide proofs of concept, and then there could be other methods we don't fifty-fifty know virtually.

Regardless, the best, most reliable method continues to be social engineering.

Six tips for amend securing air gapped computers

As we've covered, simply having a computer air gapped doesn't provide quite the level of security as information technology used to. Again, that'due south not to say that air gapping isn't still a phenomenal security mechanism. Information technology is. But could yous practice more to make your air gapped systems safer?

Admittedly.

Here are six tips for air gap security:

Secure the machine off-site or in a fully-secured room
Brand sure all cables to the machine are properly shielded
Employ USB Port Blockers to plug any unused USB ports
Turn the car off and unplug information technology from the power source when not in utilize
Supplant all standard drives with SSD
Encrypt all information