Nexor have just released a briefing paper Air-Gaps, Firewalls and Data Diodes in Industrial Control Systems looking the issues around segregating industrial control system networks. What works best: Air Gaps, Firewalls or Data Diodes?
The answer is of course, it depends.
Segregation is used to prevent the spread of malware that could stop an industrial process running, or cause a safety issue. The purpose of the paper is to ensure that Data Diodes are considered as part of the tool kit when a solution architect is looking at how to segregate systems. Data diodes are not always the right answer; air gaps and firewalls have their place too – the important part is that an informed choice takes place.
The paper is aimed at the business manager, giving only brief details on some of the more technical points. In the coming weeks, I will blog on specific technical issues raised in the briefing paper to explore them further.
- Overcoming Air Gap Security Failures
- Data Diode Technology Can Help Solve Complex Cyber Security Issues
Having read the briefing, please let me have your comments and view on the issues raised below.