luftgapping

Luftgapping is a security measure that involves physically isolating a computer or network from external networks, most notably the internet. This isolation is achieved by ensuring there is no physical or wireless connection between the air-gapped system and any other network. The term "luftgapping" is derived from the German word "Luft," meaning air, and "gap," referring to the physical separation.

The primary purpose of luftgapping is to prevent unauthorized access, data breaches, and cyberattacks. Systems that are luftgapped are considered highly secure because they are not vulnerable to network-based threats such as malware, viruses, or remote hacking attempts. This makes luftgapping a critical security practice for sensitive data and critical infrastructure.

Common applications of luftgapping include protecting classified government information, securing industrial control systems (ICS) in power plants or manufacturing facilities, and safeguarding financial transaction systems. In these scenarios, the cost and inconvenience of implementing luftgapping are outweighed by the need for extreme security.

Despite its effectiveness, maintaining a truly luftgapped system can be challenging. Data transfer to and from a luftgapped system must be done through manual means, such as USB drives or other portable media. This process itself can introduce risks if not managed carefully, as these removable media can potentially carry malware. Therefore, strict protocols for scanning and handling any data introduced to or removed from a luftgapped environment are essential. The concept is based on the principle that an attacker cannot attack what they cannot reach.