{"id":2503,"date":"2022-05-27T11:48:19","date_gmt":"2022-05-27T04:48:19","guid":{"rendered":"http:\/\/fra.com.vn\/en\/?post_type=product&p=2503"},"modified":"2022-06-08T16:48:58","modified_gmt":"2022-06-08T09:48:58","slug":"data-diode-chuyen-dung","status":"publish","type":"product","link":"https:\/\/fra.com.vn\/en\/san-pham\/data-diode-chuyen-dung\/","title":{"rendered":"DEDICATED DATA DIODE"},"content":{"rendered":"

Data Diode is a security device for physical one-way data transmission, providing a deployment plan that ensures quality of service,\u00a0\u00a0<\/span>security<\/span><\/a>\u00a0, and wide deployment capabilities.\u00a0This article introduces Data Diode solutions and practical applications in militaries of different countries.<\/span><\/strong><\/p>\n

About Data Diode solution for safe one-way data transmission<\/span><\/a><\/strong><\/p>\n

Today, communication technology facilitates the exchange of information between devices and networks.\u00a0However, it is a common practice in network architecture to add protective barriers between trusted and untrusted networks.\u00a0In the US Industrial Automation and Control System (IACS) guidelines, many protective barrier devices are proposed between a power plant control network and unsafe networks. (such as factory networks and the internet (NIST, 2011)).\u00a0The report of the US Department of Homeland Security (DHS) has listed the threats to the industrial network control system (ICS), sorted by the level of decreasing risk, Specifically: software containing malicious code (38%), system not updated with patches (29%), open connections (17%),\u00a0regulatory violations (9%), finally leaking information, exploiting and opening backdoors.\u00a0Corresponding to the above threats, DHS also recommends 7 strategies to protect Critical Industrial Infrastructure.\u00a0According to statistics in 2014-2015, these strategies help prevent attacks on the system up to 98%.\u00a0Some of those strategies are:<\/span><\/p>\n

1. Applications are confirmed (Application Whitelisting): up a list of applications that are allowed to be installed.<\/span><\/p>\n

2. Establish standard configuration policy and validated patch update schedule.<\/span><\/p>\n

3. Minimize the scope to be protected, such as isolating the ICS system, blocking unused services\/ports;\u00a0use Data Diode to divide functional network areas;\u00a0For networks that need bidirectional data transmission, use each port separately for each data transmission\/receiving line.<\/span><\/p>\n

4. Build a protected environment: restrict direct paths between servers;\u00a0prevent and prevent infection.<\/span><\/p>\n

5. Ensure secure remote access: Find and remove backdoor and modem access applications;\u00a0only allowing monitoring to be performed by the Data Diode hardware device and not by software with a \u201cread-only\u201d configuration setting;\u00a0grant connection permission per session with time setting, do not grant connection permission permanently.<\/span><\/p>\n

From the above options, it shows that there are two approaches in implementing the IACS system security.<\/span><\/p>\n

Firstly<\/span><\/em><\/strong>\u00a0, the strategy is based on building an explicit policy to ensure system safety such as: unifying secure applications installed on the system;\u00a0coordinate with the OS\/software vendor to request official patches from the manufacturer;\u00a0lock unused ports\/services on the system, control\/monitor device access, limit persistent remote connections.<\/span><\/p>\n

Second<\/span><\/em><\/strong>\u00a0, DHS proposes a new technology-oriented security device, named Data Diode<\/span>\u00a0.\u00a0<\/span><\/em>This is a secure device for physical one-way data transmission, providing a deployment option that ensures quality of service, security, is widely deployable, and has been proven to be reliable and reliable. extensible in many government agencies.<\/span><\/p>\n

The problem is that industrial networks with sensitive and important data need to be isolated, but still have a policy of decentralization of access with authorized users, easily leading to the risk of being hacked. network public.\u00a0The best solution is to apply advanced technology, the Data Diode security device only allows one-way information flow, which is invulnerable to network attacks.<\/span><\/p>\n

In fact, Data Diode is most commonly used in IACS systems, bank data centers and military systems.\u00a0This solution is implemented according to 2 main models, to preserve the basic properties of a system.<\/span><\/p>\n

\n