Question

What is an air-gapped computer, and what are its purpose and benefits?

Answer 1

An air-gapped computer is a machine that is physically isolated from unsecured networks (most importantly the Internet). The system has no network connection—no Ethernet, Wi‑Fi, Bluetooth, cellular, or other remote links—so data can only be transferred by physically moving storage (USB drives, CDs, external hard drives) or by direct human interaction.

Purpose
- To reduce the attack surface by removing network-based entry points and blocking remote attackers from reaching the system.
- To protect particularly sensitive data, keys, or control systems where confidentiality, integrity or safety is critical.

Common use cases
- Industrial control systems and SCADA for critical infrastructure (power plants, water treatment).
- Military, intelligence, and government systems handling classified information.
- Financial systems and transaction-signing devices (e.g., cryptocurrency cold wallets).
- Secure key-generation and certificate signing.
- Air-gapped build/signing machines for high-assurance software releases.

Primary benefits
- Strong protection against network-borne attacks (worms, remote exploits, phishing, drive‑by downloads).
- Greatly reduces exposure to many classes of malware and online espionage.
- Limits remote data exfiltration channels; attackers need physical access or a compromised removable medium to get data out.
- Simpler security model for critical assets—fewer moving parts to secure and monitor.

Important limitations and residual risks
- Not invulnerable: attacks that use removable media (infected USB drives), insiders, supply-chain compromise, or physical tampering can still breach the system.
- Covert channels exist (electromagnetic, acoustic, optical, thermal, power/voltage, radio) that sophisticated attackers can exploit to exfiltrate data from supposedly air-gapped machines.
- Maintenance and updates are more cumbersome, increasing operational overhead and the risk of introducing malicious or outdated software through manual updates.
- Physical security and strict procedures are required; the human factor (insiders, contractors) is often the weakest link.

Best practices for maintaining an effective air gap
- Physically disable or remove networking hardware; keep wireless radios off and ports blocked or sealed.
- Enforce strict controls on removable media: approved devices only, one‑way data diodes if needed, and thorough scanning/air‑gap-safe transfer procedures.
- Use dedicated, hardened hardware and minimal software on the air-gapped system.
- Protect firmware/BIOS and require secure boot, strong authentication, tamper-evident seals, and physical access controls.
- Have well-defined, auditable processes for updates and data transfer (chain-of-custody, checksums, code signing).
- Consider electromagnetic shielding (TEMPEST) and other countermeasures for high-threat environments.

Summary
An air-gapped computer is a physical-isolation approach used to reduce risk by eliminating network connectivity. It’s an effective tool for protecting highly sensitive systems and data, but it requires rigorous physical security, disciplined procedures, and awareness of nonnetwork attack vectors to be truly effective.