| Air gapping is a security measure that involves physically isolating a computing device or network and preventing it from establishing an external connection. Air gapping is often used to protect critical SCADA systems from attack, including those that support the military and industrial power industries. Air gapping can also aid in recovery efforts. For example, if a company's network is hit by a ransomware attack, but the company used air gapping as part of their 3-2-1 backup strategy, they will have an offline copy of the latest backup to use for recovery and not have to pay the ransom. To prevent unauthorized data extrusion through electromagnetic or electronic exploits, there is often a specified amount of space between the air gapped system and outside walls and between its wires and the wires for other technical equipment. The U.S. National Security Agency TEMPEST project provides detailed recommendations for how to set up air gapping as a security measure. While systems that are air gapped are typically used to protect critical systems and data, attackers have found a way to circumvent those protective gaps and gain access to the systems to covertly exfiltrate data from them. Continue reading... |
No comments:
Post a Comment