Data diode for high security

[bac1]

If you reuse the sneakernet media then you still can't be sure that no information is getting back. I guess you could burn CDs/DVDs and then shred them every time, but that's slow and has an ongoing cost.

On the other hand, if you use fiber optics, you get better security than sneakernet with reused media, along with greater ease and negligible ongoing costs.

http://ephemer1c.wordpress.com/2013/05/16/data-diode/

The key is three fiber optic converters. Why three and not two? Because the transmitting side needs a carrier signal.

Just set it up and tested it out. udp-receiver --interface eth0 on the receiving end. udp-sender --async --file FILENAME on the sending end. Works like a charm. All off-the-shelf hardware. Hardware setup was a breeze. Anyone with any questions, let me know.

What OS did you use on the PI? Did you use SMTP as your transfer method, i' m very interested in this set-up!

Many thanks

[1714637770]

1714637770

[1714637770]

1714637770

[1714637770]

1714637770

[1714637770]

1714637770

[BowieMan]

I've been thinking about how I could construct my own data diode.  I know there is a lot to consider, but right now I am just curious about the physical layer.

Does anyone know if it would be possible to splice into some cat-5 cable a few actual diodes and still have the signal pass?  Or would they mess up the impedance, or something like that.  I know there are transmit and receive pairs, but perhaps they could be remapped somehow.  I would be cool if you could actually just buy some diodes and make your own one way cable.

That's a very interesting idea! But I also wonder whether the signal wouldn't be too corrupted maybe. I guess ethernet compensates for that, but will it be enough? Also, isn't there other (management) traffic on those cables, other than actual TCP/IP communication?

[maqp]

Related more to the actual topic, if you want plug and play removal of Rx or Tx, you can use this : https://greatscottgadgets.com/throwingstar/

Just remember this provides very little protection against covert channels and unintended transmissions. You kind of want the optical gap between the systems.

Edit // off-topic. TFC project discussed earlier in this topic is for the most part finished, and ready for use: https://github.com/maqp

[g1kumar]

Hi members,
 I am new to the forum and searching for the same topic.
 I want to make a Ethernet-based Data Diode.
 Please share with me "how to make" if anybody got success :-)
 Tell me the procedure by providing your guidance.
 Thanks a lot in advanced..