An air gap , air wall , air gapping or disconnected network is a network security measure employed on one or more computers to ensure that a secure computer network is physically isolated from unsecured networks, such as the public Internet or an unsecured local area network . It means a computer or network has no network interface controllers connected to other networks, with a physical or conceptual air gap, analogous to the air gap used in plumbing to maintain water quality.
33-664: [REDACTED] Look up gap in Wiktionary, the free dictionary. Gap or The Gap may refer to various openings, vacant spaces, lacks or pauses: Natural features [ edit ] Gap (landform) , a low point or opening between hills or mountains or in a ridge or mountain range Treefall gap , a spacing between large trees in a forest Places [ edit ] Gap, Alberta , Canada Gap, Hautes-Alpes , France Gap, North Carolina , United States Gap, Pennsylvania , United States Garmisch-Partenkirchen , Germany,
66-657: A French football club Gap Inc. , a clothing store chain Global Animal Partnership , for animal welfare Government Accountability Project , for US whistleblower protection Great Ape Project , advocating legal rights for great apes Group of Personal Friends ( Grupo de Amigos Personales ), an armed guard of the Socialist Party of Chile 1970-1973 Group for the Advancement of Psychiatry , US Grupo Aeroportuario del Pacífico ,
99-457: A French football club Gap Inc. , a clothing store chain Global Animal Partnership , for animal welfare Government Accountability Project , for US whistleblower protection Great Ape Project , advocating legal rights for great apes Group of Personal Friends ( Grupo de Amigos Personales ), an armed guard of the Socialist Party of Chile 1970-1973 Group for the Advancement of Psychiatry , US Grupo Aeroportuario del Pacífico ,
132-601: A Mexican airport operator Gruppi di Azione Patriottica (Patriotic Action Groups), Italian WWII partisan group Gruppi di Azione Partigiana (Partisan Action Group), an Italian resistance group founded by Giangiacomo Feltrinelli Guyana Action Party Southeastern Anatolia Project ( Güneydoğu Anadolu Projesi ), a regional development project in Turkey The Great Atlantic & Pacific Tea Company , ticker symbol GAP Science and technology [ edit ] Band gap or "energy gap",
165-522: A Mexican airport operator Gruppi di Azione Patriottica (Patriotic Action Groups), Italian WWII partisan group Gruppi di Azione Partigiana (Partisan Action Group), an Italian resistance group founded by Giangiacomo Feltrinelli Guyana Action Party Southeastern Anatolia Project ( Güneydoğu Anadolu Projesi ), a regional development project in Turkey The Great Atlantic & Pacific Tea Company , ticker symbol GAP Science and technology [ edit ] Band gap or "energy gap",
198-443: A USB drive not visible to Windows as a transport channel between the air-gapped computer and a computer connected to the internet, presumably as a way to share files between the two systems. NFCdrip was the name given to the discovery of stealthy data exfiltration through NFC (Near-field communication) radio abuse and signal detection in 2018. Although NFC enables devices to establish effective communication by bringing them within
231-602: A ban on wireless connections to or from the secure network, or similar restrictions on EM leakage from the secure network through the use of TEMPEST or a Faraday cage . Despite a lack of direct connection to other systems, air-gapped networks have been shown to be vulnerable to attack in various circumstances. Scientists in 2013 demonstrated the viability of air gap malware designed to defeat air gap isolation using acoustic signaling. Shortly after that, network security researcher Dragos Ruiu 's BadBIOS received press attention. In 2014, researchers introduced AirHopper ,
264-432: A bifurcated attack pattern showing the feasibility of data exfiltration from an isolated computer to a nearby mobile phone, using FM frequency signals. In 2015, BitWhisper, a covert signaling channel between air-gapped computers using thermal manipulations was introduced. BitWhisper supports bidirectional communication and requires no additional dedicated peripheral hardware. Later in 2015, researchers introduced GSMem,
297-478: A few centimeters of each other, researchers showed that it can be abused to transmit information at a much longer range than expected - up to 100 meters. In general, malware can exploit various hardware combinations to leak sensitive information from air-gapped systems using "air-gap covert channels". These hardware combinations use a number of different media to bridge the air-gap, including: acoustic, light, seismic, magnetic, thermal, and radio-frequency. From
330-409: A high level of procedures to ensure integrity of the industrial safety system. The concept represents nearly the maximum protection one network can have from another (save turning the device off). One way to transfer data between the outside world and the air-gapped system is to copy data on a removable storage medium such as a removable disk or USB flash drive and physically carry the storage to
363-399: A license plate code GAP Great Allegheny Passage (GAP), a hiking/biking trail stretching from Pittsburgh, Pennsylvania, to Cumberland, Maryland Organizations and businesses [ edit ] Air Philippines , ICAO designator GAP G Adventures , formerly Gap Adventures, Canadian travel company Gap Analysis Program , on wildlife health Gap Broadcasting Group Gap FC ,
SECTION 10
#1732765088587396-436: A method for exfiltrating data from air-gapped computers over cellular frequencies. The transmission - generated by a standard internal bus - renders the computer into a small cellular transmitter antenna. ProjectSauron malware discovered in 2016 demonstrates how an infected USB device can be used to remotely leak data off of an air-gapped computer. The malware remained undetected for 5 years and relied on hidden partitions on
429-404: A physical cut of the network by a specific hardware. Sophisticated computer viruses for use in cyberwarfare , such as Stuxnet and Agent.BTZ have been designed to infect air-gapped systems by exploiting security holes related to the handling of removable media . The possibility of using acoustic communication has also been demonstrated by researchers. Researchers have also demonstrated
462-690: A ridge or mountain range Treefall gap , a spacing between large trees in a forest Places [ edit ] Gap, Alberta , Canada Gap, Hautes-Alpes , France Gap, North Carolina , United States Gap, Pennsylvania , United States Garmisch-Partenkirchen , Germany, a license plate code GAP Great Allegheny Passage (GAP), a hiking/biking trail stretching from Pittsburgh, Pennsylvania, to Cumberland, Maryland Organizations and businesses [ edit ] Air Philippines , ICAO designator GAP G Adventures , formerly Gap Adventures, Canadian travel company Gap Analysis Program , on wildlife health Gap Broadcasting Group Gap FC ,
495-406: A security perspective, the main drawback of an air gapped network is the inability of software to automatically self update. Users and system administrators must instead download and install updates manually. If a strict update routine is not followed, this results in out-of-date software running on the network, which may contain known security vulnerabilities. If an adversary manages to gain access to
528-562: A word or other form that does not exist in a language but could Gap, a kind of ellipsis, e.g.: Gap is an instance of gapping Parasitic gap , a kind of correlated ellipsis Mathematics and computer science and technology [ edit ] Air gap (networking) , a security measure GAP (computer algebra system) (Groups, Algorithms and Programming), a software package Generalized assignment problem Generic access profile , an interoperability protocol used in wireless telephony Gimp Animation Package, an extension for
561-562: A word or other form that does not exist in a language but could Gap, a kind of ellipsis, e.g.: Gap is an instance of gapping Parasitic gap , a kind of correlated ellipsis Mathematics and computer science and technology [ edit ] Air gap (networking) , a security measure GAP (computer algebra system) (Groups, Algorithms and Programming), a software package Generalized assignment problem Generic access profile , an interoperability protocol used in wireless telephony Gimp Animation Package, an extension for
594-428: Is different from Wikidata All article disambiguation pages All disambiguation pages gap [REDACTED] Look up gap in Wiktionary, the free dictionary. Gap or The Gap may refer to various openings, vacant spaces, lacks or pauses: Natural features [ edit ] Gap (landform) , a low point or opening between hills or mountains or in
627-447: Is different from Wikidata All article disambiguation pages All disambiguation pages Air gap (networking) An air-gapped computer or network is one that has no network interfaces , either wired or wireless, connected to outside networks. Many computers, even when they are not plugged into a wired network, have a wireless network interface controller ( WiFi ) and are connected to nearby wireless networks to access
660-428: Is easier to control than a direct full network interface, which can be attacked from the exterior insecure system and, if malware infects the secure system, can be used to export secure data. That's why some new hardware technologies are also available like unidirectional data diodes or bidirectional diodes (also called electronic airgaps), that physically separate the network and transportation layers and copy and filter
693-468: The Bell–LaPadula confidentiality model , where data can be moved low-to-high with minimal security measures, while high-to-low requires much more stringent procedures to ensure protection of the data at a higher level of classification. In some cases (for instance industrial critical systems), the policy is different: data can be moved from high-to-low with minimal security measures, but low-to-high requires
SECTION 20
#1732765088587726-770: The "Glock Automatic Pistol" cartridge See also [ edit ] Gap theorem (disambiguation) Gaps (disambiguation) The Gap (disambiguation) Topics referred to by the same term [REDACTED] This disambiguation page lists articles associated with the title Gap . If an internal link led you here, you may wish to change the link to point directly to the intended article. Retrieved from " https://en.wikipedia.org/w/index.php?title=Gap&oldid=1258390712 " Categories : Disambiguation pages Place name disambiguation pages Hidden categories: Articles containing Spanish-language text Articles containing Italian-language text Articles containing Turkish-language text Short description
759-770: The "Glock Automatic Pistol" cartridge See also [ edit ] Gap theorem (disambiguation) Gaps (disambiguation) The Gap (disambiguation) Topics referred to by the same term [REDACTED] This disambiguation page lists articles associated with the title Gap . If an internal link led you here, you may wish to change the link to point directly to the intended article. Retrieved from " https://en.wikipedia.org/w/index.php?title=Gap&oldid=1258390712 " Categories : Disambiguation pages Place name disambiguation pages Hidden categories: Articles containing Spanish-language text Articles containing Italian-language text Articles containing Turkish-language text Short description
792-529: The GIMP Graph automorphism problem Other uses [ edit ] Gap (chart pattern) , areas where no trading occurs in the stock market Gap (Mandaeism) or Gaf, a demon of the Mandaean underworld GAP insurance , a type of vehicle insurance Gap Mangione , or Gaspare Charles "Gap" Mangione, jazz pianist and bandleader Gap year , a prolonged period between life stages .45 GAP ,
825-414: The GIMP Graph automorphism problem Other uses [ edit ] Gap (chart pattern) , areas where no trading occurs in the stock market Gap (Mandaeism) or Gaf, a demon of the Mandaean underworld GAP insurance , a type of vehicle insurance Gap Mangione , or Gaspare Charles "Gap" Mangione, jazz pianist and bandleader Gap year , a prolonged period between life stages .45 GAP ,
858-516: The Internet and update software. This represents a security vulnerability, so air-gapped computers have their wireless interface controller either permanently disabled or physically removed. To move data between the outside world and the air-gapped system, it is necessary to write data to a physical medium such as a thumbdrive , and physically move it between computers. Physical access has to be controlled (man identity and storage media itself). It
891-474: The air gapped network (for instance by contacting a disgruntled employee or using social engineering) they may be able to quickly spread within the air gapped network using such vulnerabilities with a possibly higher success rate than on the public Internet. System administrators may manage software updates in an air gapped network using dedicated solutions such as Windows Server Update Services or network logon scripts. Such mechanisms would allow all computers on
924-442: The application data. In environments where networks or devices are rated to handle different levels of classified information , the two disconnected devices or networks are referred to as low side and high side , low being unclassified and high referring to classified, or classified at a higher level. This is also occasionally referred to as red (classified) and black (unclassified). Access policies are often based on
957-505: The energy interval in which particles cannot propagate Gallium(III) phosphide , a semiconductor material Glyceraldehyde 3-phosphate , a 3-carbon molecule metabolite important in both glycolysis and the Calvin cycle Good agricultural practice , any collection of value-based agricultural practices GTPase-activating proteins , a family of regulatory proteins Linguistics [ edit ] Gap, accidental gap , or lexical gap,
990-452: The energy interval in which particles cannot propagate Gallium(III) phosphide , a semiconductor material Glyceraldehyde 3-phosphate , a 3-carbon molecule metabolite important in both glycolysis and the Calvin cycle Good agricultural practice , any collection of value-based agricultural practices GTPase-activating proteins , a family of regulatory proteins Linguistics [ edit ] Gap, accidental gap , or lexical gap,
1023-592: The feasibility of data exfiltration using FM frequency signals. Examples of the types of networks or systems that may be air gapped include: Many of these systems have since added features that connect them during limited periods of time to the organisation's intranet (for the need of surveillance or updates) or the public internet, and are no longer effectively and permanently air gapped, including thermostats with internet connections and automobiles with Bluetooth , Wi-Fi and cellular phone connectivity. Limitations imposed on devices used in these environments may include
Gap - Misplaced Pages Continue
1056-415: The other system. This access still has to be carefully controlled since USB drive may have vulnerabilities (see below). The upside to this is that such a network can generally be regarded as a closed system (in terms of information, signals, and emissions security), unable to be accessed from the outside world. The downside is that transferring information (from the outside world) to be analyzed by computers on
1089-403: The secure network is extraordinarily labor-intensive, often involving human security analysis of prospective programs or data to be entered onto air-gapped networks and possibly even human manual re-entry of the data following security analysis. That's why another way to transfer data, used in appropriate situations like critical industries, is to use data diodes and electronic airgaps, that assure
#586413