3

I'm facing the issue to develop a system which archives some data, which was available via a web-server some time before (to selected users). Now the question arises on how to securely transport the valuable data from the live / online server to the air-gapped machine (not neccessarily a "true" server, probably without server OS and server HW).

As the data-amounts are rather small (few GB / half-year, one or two DVDs are enough, one large chunk), I thought about burning the data onto DVDs, wiping the encrypted copies from the online-server and re-encrypting the data on the air-gapped machine for long-term storage.

So much for my idea, now the more "formal" requirement:
I need to transport the data with minimal risk of infecting the air-gapped machine.
Obviously USB-sticks or similar are a bad idea and already have been exploited (thanks BadUSB). I thought DVDs (only once-writeable) are the most secure choice as they deny any sort of back-flowing channel from the archive system to the live-system. I may even mandate the use of some scanning on a secondary machine before the data is to be fed in into the archive.

Please also note that the archive system can't be optimized for availability reasons.

With all this background, my question:
Is there any more secure way of transporting data from an online-system to an airgapped-system than to use DVDs (+ scan-after-burn)?

8
  • Would a unidirectional network cable meet you requirements? – Gerald Davis Jul 1 '15 at 22:29
  • archivates -> archives ​ ? ​ ​ ​ – user49075 Jul 2 '15 at 4:39
  • @GeraldDavis Wouldn't this break the air-gap? – SEJPM Jul 2 '15 at 7:18
  • @SEJPM Yes, a unidirectional network cable would break the air gap. Furthermore, it is quite inconvenient to work with because you can't use any of the standard file transfer tools (they pretty much all rely on bidirectional communication being available). You'd have to have one machine "broadcast" the source data and the other one sniff it out of the cable. You'd need to build error-checking in and perform manual correction should some element be dropped. – Stephane Jul 2 '15 at 9:08
  • @SEJPM Yes it would not be air gapped however is air gap a requirement or is it a method to achieve the goal of no information leak out of the secure system. I would point out unidirectional (aka data diodes) have been used in secure systems to include nuclear reactors for decades. – Gerald Davis Jul 2 '15 at 12:15
1

If you're really that paranoid about your air-gapped systems, you might want to consider using backup tapes.

They include no active part that could be exploited and aren't mounted as a standard file system so that limit the way the data they contain could be exploited.

2
  • +1, nice idea, although not applicable, as this would mean you'd need to have some (trusted & air-gapped) PC for accessing the tapes, thus not fully solving the problem. – SEJPM Jul 2 '15 at 16:01
  • I don't see the problem: if you're talking about air-gapped system, you need a computer (otherwise, it's just offline storage - for which tapes are also well suited). Just dedicate a machine part of the air-gapped system to read the tapes – Stephane Jul 3 '15 at 7:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.