I'm trying to take information that's on Computer A, write it onto some form of persistent storage, and copy that information onto Computer B. Both will be running a relatively recent version of Windows 10. The computers may be hundreds of feet to tens of miles from each other.
My current plan to accomplish this is using USB flash drives. My threat model does not involve state level actors, merely people knowledgeable enough to use USB malware.
I'd like to know:
- Alternatives to USB, for example if we have a serial port available
- Where to find the state of the art as far as group policy for disabling any kind of execution of code that comes in over USB
- Antivirus or otherwise that similarly protects the computer from USB based malware
The systems must be airgapped, and they must have this information transfer occur. The information is on the order of tens of MB, and will only be transferred about once every 24 hours. The device used for the transfer may be destroyed after a single use if that improves the security. We're not concerned so much about the integrity of the data (it's already encrypted + ECC formatted), more the possibility for Computer A to be infected with malware from the USB while it writes the data out.