Air-Gapped Network.

An air-gapped network has no direct connection to less trusted networks; data crosses the boundary only through controlled means like removable media, data diodes, or kiosk transfer stations. Air gaps protect nuclear-plant safety systems, classified military networks, cryptocurrency cold storage, voting infrastructure, and parts of ICS, on the assumption that physical isolation forces an attacker to bridge the gap.

History shows the gap is bridgeable. Stuxnet (uncovered 2010) reached Iran's Natanz enrichment plant on USB media and spread through the isolated network via zero-days such as the LNK-file flaw CVE-2010-2568. The agent.btz worm crossed onto US Central Command's classified networks in 2008 via a USB drive, prompting Operation Buckshot Yankee and a lasting DoD ban on removable media. Beyond USB, researchers led by Mordechai Guri at Ben-Gurion University have demonstrated a catalogue of covert exfiltration channels that leak data from a truly disconnected host: AirHopper (FM radio from the GPU bus), Fansmitter (acoustic via fan RPM), BitWhisper (thermal), and LANtenna (RF from Ethernet cabling). These are low-bandwidth but real, showing an air gap slows but never eliminates a determined, already-resident adversary.

flowchart LR
  subgraph Untrusted["Corporate / Internet"]
    A[Attacker]
  end
  subgraph Gap["Controlled boundary"]
    B[USB / removable media]
    C[Data diode - one way]
    D[Kiosk / scan station]
  end
  subgraph AirGap["Air-gapped network"]
    E[Engineering workstation]
    F[ICS / SIS controllers]
  end
  A -.->|Infected USB / supply chain| B
  B --> E
  C --> E
  D --> E
  E --> F
  F -.->|Covert channel:<br/>RF, acoustic, thermal| A

Effective programs pair the gap with strict media-control policy, signed and verified firmware, host-based intrusion detection, data diodes for one-way telemetry, and monitoring for anomalous device, USB, or RF activity — treating the air gap as one layer of defence in depth, not a guarantee.