Questions tagged [air-gap]
An air gap or air wall is a network security measure
32
questions
0
votes
0
answers
161
views
Hash-Based Technique to Detect Ransomware Corruption on the Fly?
I have developed an Excel spreadsheet to compare lists of SHA-512 hashes from two separate drives. One drive is the source data drive on a Windows machine. The other is a backup of that drive, ...
- 123
2
votes
1
answer
1k
views
How do I securely transfer information between airgapped systems?
I'm trying to take information that's on Computer A, write it onto some form of persistent storage, and copy that information onto Computer B. Both will be running a relatively recent version of ...
- 151
23
votes
5
answers
7k
views
Unidirectional continuous data transfer to an air-gapped computer
What would be a way to transfer files in one direction from internet-facing computerA => air-gapped computerB to protect the files on computerB from unauthorised disclosure, short of using an ...
- 339
0
votes
0
answers
108
views
Can attackers send commands to/control infected air-gapped computers?
I've been reading up on malware that can bridge air gaps between computers, like GSMem, Funtenna, etc. In the papers and articles I've been reading, the researchers mostly talking about getting files ...
- 983
0
votes
0
answers
230
views
Using QR codes as means of communicating with an air-gap system [duplicate]
The air-gap system in question is a cryptocurrency vault system that is responsible for generating addresses and signing transactions while it keeps the sensitive information air-gapped.
[ Vault app ] ...
- 101
2
votes
1
answer
436
views
How to airgap properly? [closed]
Imagine I have the research papers on designing COVID-19, the cure and some nuke launch codes on my laptop and want to often communicate those to another computer at my home. I already installed a ...
- 1,917
0
votes
1
answer
155
views
How exploitable is a machine with a vulnerable library if it is not open to the internet? [closed]
Say I have a vulnerable library on a test machine, is it possible for an attacker to use that vulnerability to exploit the system and maybe the network, if the machine is not open to the internet?
- 111
2
votes
0
answers
182
views
Patch management for production servers
I'm trying to implement an automated patching program at a small SaaS provider.
When a customer signs up for our software, we provision them a Linux VM in our primary datacenter.
Each customer also ...
- 17
0
votes
2
answers
150
views
Eliminating possible watermarking done by text editors
On which text editor is it easiest to prevent and/or eliminate watermarking?
Pre-installed malware that defeats anonymity being used on an airgapped system can be made ineffective, at least partially,...
- 297
1
vote
1
answer
1k
views
Send and receive files in an air-gapped system
Is it possible to have an air-gapped system which can send and receive files?
From a high level perspective, I can't seem to figure out how this can work and I am starting to think it is impossible. ...
- 755
1
vote
1
answer
115
views
Possible to control desktop data activity LED on Windows or Linux for data extraction? [closed]
I am trying to extract data from an air-gapped computer as a project.
I already have a working prototype using high frequency sound and a key-logger.
I would like to find another way to do it without ...
- 11
1
vote
2
answers
186
views
Using command (dd if=/dev/mmcblk0p1 | sha1sum) while running from initramfs
I have an opensource airgapped raspberry pi project seen at the following link: www.privatekeyvault.com
I have provided a method for installing LUKS full disk encryption seen at the following: https:/...
- 111
1
vote
1
answer
348
views
How to prevent a virus from stealing data when I transfer files between offline and online computers?
Let's say I have one offline computer with some important data, and one online computer. Sometimes I need to move files from the offline computer to the online one. When I transfer those files, is ...
- 81
2
votes
3
answers
249
views
Is malware on an air gapped computer a requirement to communicate over side-channels?
Is it a requirement to infect the air-gapped pc with malware at first to get all needed functions for a communication path between air gapped pc and attacker pc?
For example: Stuxnet, first was the ...
user183457
0
votes
1
answer
606
views
Pinhole communication with air gapped network
A long time ago ago I worked for a small bank. We used a physically separated network to host our internal servers that handled all the transactions, as well as the workstations accessing the system.
...
- 1
4
votes
1
answer
445
views
Can an air-gapped PC receive malicious code even when completely clean, apart from all physically attacks?
The Basic question is in the title there are more questions bellow but it is in context of the question in the title...hopefully
What i have read is that it can eavesdrop the Airgap PC via
acoustic
...
- 43
7
votes
3
answers
1k
views
Malware which can bridge air gaps
The following statement is made on the Qubes website:
Malware which can bridge air gaps has existed for several years now
and is becoming increasingly common.
Can someone provide an example of ...
- 7,692
3
votes
2
answers
458
views
Will ransomware reach an air-gapped computer?
I'm doing some research and wondered since ransomware allows a user a decryption key- how that would be possible if it is not on a network?
12/23 Edit: After learning how ransomware works I'm now ...
- 39
7
votes
3
answers
3k
views
How do I actually air gap my CA computer?
I remember reading about the necessity of air gapping the CA computer (never connecting it to any network whatsoever, no USB dongles etc).
I am preparing for setting up a number of certificates (...
- 213
3
votes
2
answers
613
views
Best practices for connecting USB key to secure computer?
This is a bit of a hypothetical, but I am interested in an answer. First, I understand that no one can protect themselves against three letter organizations, so I am really just wondering about best ...
- 3,861
3
votes
3
answers
305
views
Necessity of physical access to air-gapped computers
In an intriguing paper Fansmitter: Acoustic Data Exfiltration from
(Speakerless) Air-Gapped Computers (also see this summary) the authors demonstrate that they are able to exfiltrate data from an air-...
- 133
8
votes
5
answers
12k
views
Air-gap implementation for personal computer use
I recently read over Bruce Schneier's article on setting up an air-gapped computer and am looking to improve my setup (compared to my current "use one Windows PC for everything" model). The main ...
- 283
5
votes
4
answers
861
views
How can using multiple laptops improve security?
My being an admirer of Edward Snowden I've read several books about him. In each book and article there was said that he used four laptops in Hong Kong. Not for storing the documents, but because it ...
- 2,772
3
votes
1
answer
190
views
Secure online server -> Airgap transport?
I'm facing the issue to develop a system which archives some data, which was available via a web-server some time before (to selected users). Now the question arises on how to securely transport the ...
- 9,720
8
votes
2
answers
450
views
Software can be audited, is there an equivalent for hardware?
In software, code auditing can be used as a mean to gain trust into a software. Of course closed, proprietary software would complicate this, and require to do reverse engineering. Anyway there seems ...
- 1,442
1
vote
0
answers
238
views
Airgapped network security: feasable to prevent precompiled code from running to limit vulnerability to hacked firmware?
I'm not sure if this is the right medium to ask this but I'm looking for pointers or if this is being done. I realize that this is still a bit of a open question.
When internal network holds critical ...
- 163
5
votes
2
answers
2k
views
Is there a GNU/Linux or BSD distribution dedicated to air-gapped computer? [closed]
I am currently in the process of setting up an air-gapped computer which will be dedicated to managing cryptographic key (including: generation of GPG key/subkey, management of a small CA, generation ...
- 53
5
votes
3
answers
1k
views
How can I securely and conveniently move keys, certs and other short data across an air gap?
What options are available for transferring data between unix machines separated by an air gap?
USB flash drives
Optical media eg CDs and DVDs
Printed paper and Scanning+OCR
QR Code software, ...
- 153
4
votes
2
answers
329
views
Adding photos to Truecrypted, airgapped laptop from camera safely
I have a Truecrypted, airgapped (no internet connectivity at all) laptop that I use as a completely secure computer for sensitive files.
I want to add images from my iPhone (I know), camera or other ...
- 49
12
votes
4
answers
3k
views
How to airgap a smartphone?
I'm looking to use my smartphone purely as a portable computer, with no network functionality, in order to protect my privacy.
Is removing the SIM cards from it enough to airgap it? Or do I need to ...
- 121
7
votes
1
answer
643
views
How safe are CD's for Air Gapped computers?
It is often suggested, for air-gapped PC's, to use CD/DVD's as a transfer medium between machines instead of USB sticks or portable hard-drives as it is difficult to write data to a CD/DVD without the ...
- 11.5k
5
votes
1
answer
446
views
What can be done to bridge the Air Gap, except autorun?
What can be done to bridge the Air Gap, except autorun?
Is there any hardware butterflies that can attack physically isolated Unix/Linux machine in common usb drives, like VSC (Vendor Specific ...
- 229