The Arbit Data Diode moves data from an insecure network to a secure network ensuring that no data is able to flow back. This is handles by the physical principle of the data diode. The Arbit Data Diode is a physical data diode that eliminates the threat of remote data stealing by establishing a physically secure one-way connection with a single fiber-optic cable. The transmission is handled by two dedicated servers. The sending server is called a pitcher and the receiving server is called a catcher. No data can be transported from the receiving network to the transmitting network. Therefore, the Arbit Data Diode is just as safe as manual data transfer, but offers the same convenience as a normal network connection.

The Arbit Data Diode has the following features:

• More hardware configurations available

• Maximum file size limited only by available disk space

• Based on gigabit network interfaces

• Transports all file types and emails with full transaction control

• Unlimited number of data channels

• Data channel priority (on transaction basis)

• Supports up to 24 streaming channels (video, radio, etc.)

• Back Pressure in case of critical diskspace

• Safe points in case of increased data flow

• Notifications by email: Required retransmissions, Daily operational statistics, Total count and size of transactions within last 24h.

• Operated by web-interfaces

• No daily maintenance

• Software based on hardened Linux

• Support Supervisory Control and Data Acquisition (SCADA) networks

• Support Industrial Control Systems (ICS)

SUPPORTED PROTOCOLS

• Mail (SMTP)

• Simple file transfer (FTP, SFTP)

• Windows share mapping (SMB)

• Time synchronization (NTP)

• HTTP/HTTPS forwarding

• Streaming (UDP/TCP) 

Industrial data diode designed to deliver the highest level of security to OT networks like industrial control systems (ICS) and safety critical infrastructure via physical isolation when there’s a need to connect them to a lower security network (IT Networks or Internet) for replication or analytics.

 

The DCU is designed and manufactured in Germany, its chip design forces data to flow one-way only using a unique electromagnetic induction design, to collect data and guarantee that there’s no physical path for remote access to the OT Network.

 

The DCU has a software complement called, OWG (One-way gateway) software, its two agents, a OWG sender capable of data collection of several protocols (FTP, OPC UA, Syslog), filtering and aggregating data in the OT network (Edge) to then push it thru the DCU and a OWG receiver, which receives data from the DCU and can be configured to send it directly to the cloud (AWS or MindSphere) or to another computer in the IT network.

 

The DCU and OWG are vendor neutral and support Windows or Linux systems.

 Boeing eXMeritus has designed HardwareWall™ as a Secure Data Transfer System and an off-the-shelf Controlled Interface that meets and exceeds all mission and information assurance requirements for the world’s highest-level security directives. These systems are the only bi-directional, cross-domain solutions in the market to have been deployed and UCDMO-certified in PL-3 (SECRET to SECRET), PL-4 (TOP SECRET to boeing2SECRET) and PL-5 (TOP SECRET to UNCLASS) environments and continue to operate and evolve to meet ever changing requirements and threats. By choosing HardwareWall™, organizations have realized the benefits of implementing a system that was designed with the needs and requirements of the community in mind. HardwareWall Benefits:

• Broad platform support in SELinux®

• Highly configurable and modular to allow interconnection of multiple classifications, programs, compartments, and countries

• Rapid deployment of a proven system

• Easily integrated into existing systems and workflows

• Cost competitive to fit within budgetary constraints

• Allows local development of rule sets and integration of applications

• Complete solutions incorporating content review, data labelling, MAC, RBAC, audit, etc. and high-speed one-way transfer (10Gb Ethernet)

Your confidential information needs to stay confidential. Your critical assets need to remain secure and your Intellectual property has to remain safeguarded at all costs. However, high levels of security often hamper productivity. To date, common practice has been to use a firewall or a so-called air gap (i.e. network separation) as a security measure to prevent data leakage or disaster. The results, however, are not satisfactory. Using a firewall means loosening the reins on security measures to achieve a more fluent workflow, which will put your data at risk. Using an air gap is too impractical. With the Fox DataDiode Appliance, you have a cross-domain solution that reconciles the seemingly contradictory requirements of high assurance and free flow of information. Its guaranteed one-way network connectivity makes sure you can securely and smoothly transfer information in real-time, 24x7. Offering the highest certified level of security and preventing unwanted access to business assets and critical systems. Key features of Fox DataDiode Appliance

• Transfer files (using SMB, FTP/FTPS, SFTP/SCP)
• Transfer email (SMTP)
• Synchronize time (NTP)

New capabilities of Fox DataDiode Appliance version 2.0

• Forward UDP and TCP data streams (e.g. SYSLOG, SNMP, video streams, etc.)
• In combination with additional industrial software modules from Fox-IT replicate Modbus, OPC and OSIsoft PI
• Easy customization possible
• Adjusted proxy server specifications
• Extra protocol support
• Integrated content filtering

Additional improvements in Fox DataDiode Appliance version 2.0

• The multilingual, easy-to-use web interface
• Bandwidth increased up to 890 Mbps

Key features of Fox DataDiode hardware

• Guaranteed one-way network connection, enforced in hardware
• Common Criteria certified EAL 7+
• NATO certified for the SECRET level
• Satisfies the requirements of a data diode as set out in NERC-CIP CAN-0024

Benefits The Fox DataDiode Appliance is unique compared to other unidirectional gateways and data diodes for the following reasons:

• Multiplexable: A single Fox DataDiode setup can support as many protocols and data channels as you wish, as long as the bandwidth permits; some alternative solutions require you to buy a separate diode for every single feature.
• 100% hardware solution: some alternative solutions depend on embedded firmware and are essentially low-level software solutions.
• Common Criteria certification at level EAL7+: alternative solutions are only certified to level   EAL4+ at most.
• Independent vendor: Fox-IT is from an independent state. The Fox DataDiode has been independently evaluated by labs from all over the world, including labs linked to the governments of the US, Russian Federation and India.
• Transparent solution: With the Fox DataDiode, you have clarity upfront. There is a clear distinction between the security guarantee and the solution middleware. Some alternative solutions have blurry distinctions such it is unclear how and where the security claim is guaranteed or implemented.

Hirschmann’s Rail Data Diode secures mission-critical Ethernet networks through guaranteed one-way data traffic, while also transferring data out of the secure part of the system in a highly controlled, deterministic manner. The data diode is protected from its severe operating environment with a metal housing, conformal coating, RJ45 and vibration-proof M12 ports, limiting wear-and-tear for a longer lifecycle.
The product also has routers with seven ports on either side. A redundant power supply increases the availability of the one-way data path.
The Hirschmann Rail Data Diode is best used in applications where data from mission-critical systems must be transferred via the public internet. The device’s physical nature and redundant power supply ensure that critical data can be securely and consistently transferred and monitored.
Ideal for industries with vital applications, such as:

• Critical infrastructures in transportation

• Power and chemical plants

BENEFITS

• Reliably protect networks from external cyber threats through singular data flow

• Securely transfer Ethernet data to the public internet without putting the system at risk

• Easily explain product functionality for simpler governmental approval processes

FEATURES

• Secure Ethernet ports that are safe from vulnerabilities

• Quick data transmission speed for timely monitoring

• Hardware-based device for easy-to-understand operation

• Standard RJ45 and vibration-proof M12 connectors

• Redundant voltage supply for greater availability, including 24 VDC, 110 VDC and 110/230 VAC

• Conformal coating for protection from harsh elements

• Industry-approved for use onboard trains and along railway tracks

The SDoT Diode is developed and manufactured in Germany following the Security by Design principle. As an unidirectional security gateway, the SDoT Diode allows government, defense, and critical infrastructure clients to maintain their confidentiality and integrity requirements for data provision or receipt in digitization and Industry 4.0 projects. Contrary to firewalls or bi-directional security gateways, data diodes don’t filter data according to policies that require continuous maintenance. Instead, a high degree of security is achieved by segmenting systems according to protection levels and enforcing unidirectional data flow. The main features of our data diode:

• 9.1 Gbit/s;
• Multi Protocol;
• Secure Architecture,

Since the 1980s data diode design follows the same hardware level separation principle. A fiber optic cable is used to enforce a physical separation between domains and enforce unidirectional data flow. In electronics a diode is a component that only allows current to flow in one direction. A data diode could also be created by cutting copper-leaders in a cable but that could still present a risk as they are not galvanically separated. Although the old approach to data diodes ensures physical separation of networks without a return channel, it doesn’t meet today’s requirements for bandwidth, reliability, space, project implementation speed, or bi-directional protocols. In contrast, the SDoT Diode, as a next-generation data diode, ensures logical separation of networks without a return channel due to its unique and evaluated security architecture. Side-channel attacks are prevented through the minimized kernel. The SDoT diode allows fast and high-performance unidirectional data transfer via numerous protocols in a compact form factor between two security domains. It also offers additional functions such as HTTP response status codes. In the field of critical infrastructures (e.g. factories, oil platforms, power stations, water treatment plants), the opposite is the case. Data from the isolated area with the industrial control systems (OT) are supposed to be made available for unclassified systems or the cloud. In the public sector especially in defense, intelligence and homeland security, data diodes are generally used to provide data from sensors or unclassified systems (LOW) to a classified system (HIGH). The top priority is to protect classified data in HIGH and prevent it from leaking to LOW under all circumstances.

• Database replication / updates;
• Transfer of sensor data (e.g. Radar, ELINT, Satellite);
• Lawful interception;
• Video / Audio streaming;
• Remote Screen View / Website mirror;
• Patch management and malware signatures;
• Logging and backup;
• Secure printing.

The reverse is the case in critical infrastructure (e.g. factories, oil & gas platforms, power plants, water treatment plants). Data residing in the mission-critical industrial control systems (HIGH) must be made available for IT systems or the cloud (LOW) through a data diode.  This could be machine data for monitoring in a remote supervisory command center or predictive maintenance in a big data analytics solution. The top priority is to prevent access from LOW to the industrial control systems (HIGH) under all circumstances.

• Database / Server replication (e.g. OPC, Modbus, Historian);
• Transfer of OT data;
• IT service management;
• Managed security services (SIEM to SOC);
• Video / Audio streaming;
• Remote Screen View;
• Patch management and malware signatures;
• Logging and backup;
• Secure printing.

In high security environments, it is often difficult to make a physical connection between different networks but there is still a need to share information. Consequently, a common form of data transfer is the “Air Gap” – physically transferring the information via USB stick, DVD or other portable storage media. However, these portable devices become a security risk in their own right. As this method is not in real-time, this approach also becomes impractical with today’s information volumes and time pressures. In many instances, networks are therefore joined to overcome these issues without suitable levels of security or protection being put in place beforehand. The Nexor Data Diode is an EAL7+ evaluated solution (the highest certification possible) which, due to its physical design, will only allow data transfer in one direction unlike technologies such as firewalls. This gives a 100% guarantee that no data can ever leak back to the untrusted network.
Originally developed for use by defence and government organisations, the Nexor Data Diode is used in environments that require high assurance solutions.
The Nexor Data Diode has been deployed in a variety of secure environments including file importing; system updates; network monitoring; print management; camera control; and process control interfaces.
The Nexor Data Diode performs the Flow Control element of our нашей архитектуре безопасного обмена информацией (SIXA®). This architecture is based on a modular design that offers both security and flexibility, whilst aligning to architectural patterns from the National Cyber Security Centre (NCSC) - the UK National Technical Authority for Information Assurance.

KEY FEATURES

• 100% guaranteed one-way information exchange

• Common Criteria EAL7+ evaluated

• High transfer speed and data reliability

• High throughput, ruggedised and small form factor options available

KEY BENEFITS

• Secure data transfer to the isolated network(s)

• Prevents data leakage from secure networks

• Range of evaluations to simplify accreditation

OPDS product line represents the gold standard in data diode cybersecurity, designed to support the varied and complex cybersecurity needs within the wide range of critical infrastructure industries. Acclaimed for their unmatched performance, reliability, and ease of use, OPDS data diodes protect the operational networks and digital assets of some of the world’s largest critical infrastructure facilities, including power plants, banks, substations, laboratories, oil rigs, and more.
The concept is to protect the control systems within the facility by creating a secure cyber perimeter around the plant so that plant operations are not interrupted, sabotaged or otherwise impacted by some kind of cyberattack. Depending on problems that need to be solved, there are wide range of OPDS types.

OPDS-5D

An entry level data diode solution created to address cybersecurity use cases with lower, fixed bandwidth requirements of 5 Mbps or less. The OPDS-5D features a compact, DIN rail compatible single box enclosure, conditioned for a range of applications, from climate controlled IT centers to extreme environments with high/low temperatures, dust, or smoke.

OPDS-100D

Optimized to meet the needs of most industrial control applications, the OPDS-100D delivers scalable, deterministic one-way transfer capabilities from 10 Mbps up to 104 Mbps. Designed specifically for low size, weight, and power (SWaP) requirements, the compact form factor is DIN rail mountable and readily deployable in plants, substations, and other CI facilities.

OPDS-100

Owl’s standard, all in one, 1U rack-mountable DualDiode® cybersecurity platform, designed to address critical infrastructure applications requiring low to moderate data throughput. The OPDS-100 delivers scalable performance from a base of 10 Mbps up to 104 Mbps, easily upgradeable through Owl’s variable bandwidth licensing mechanism.

OPDS-1000

A highly integrated, all in one, 1U rack-mountable cybersecurity platform. The OPDS-1000 represents the pinnacle of single-box data diode solutions and supports the high-speed one-way transfer of multiple data types/formats concurrently. Optimized for more demanding applications, it delivers a scalable link rate from 104 Mbps up to 1 Gbps with variable bandwidth licensing.

EPDS

The  most  powerful  and  capable  data  diode  solution  available  on  the  market,  the  EPDS  integrates  patented  Owl DualDiode® communication cards into two commercial enterprise servers, providing maximum processing power  and  storage.  The  EPDS  operates  on  a  hardened  Linux  operating  system  and  supports  upgradable  link  speeds from 155 Mbps up to 10 Gbps.

AROW is a Unidirectional Router, also sometimes known as a Data Diode due to its ability to entirely block network trac in one direction. While Data Diodes have been around  a long time, they sometimes have been regarded as a slow and unreliable. Very often,  data could be lost in the process of sending and receiving and as a result users on the receiver side have had incomplete or missing data. Somerdata has taken its expertise in intelligence and security solutions, to create a third generation device which is  faster, highly  reliable, and  which allows receiving of data in the same structure as it was sent, preventing  data loss. Why would you need AROW? AROW Advanced Reliable Optical Wormhole can protect governmental and commercial organisations against people who they might not  suspect as potential threats to their valuable data. Two of  the biggest threats for organisations,  governments and corporations in network and data systems are internal sabotage or accidental exltration by employees who have easy access to vital data. While rewalls can be effective, they can be circumvented by determined attackers, poorly-trained employees or internal malcontents. AROW is not a substitute for a rewall, it is an additional layer of protection against data theft and cyber attacks.
AROW is extremely effective in providing controlled access between highsecurity and low-security networks, in process control environments to allow only authorised status information to be accessed. AROW is also effective against trojans and phishing attacks  aimed at stealthy data theft since there is no physical path for data to leave the network. Designed to EAL standards, this Data Diode meets the most stringent of security requirements.
Guard your organisation from  cyber attacks and sabotage. AROW is available in 3 options of 2 variants, optimised for streaming or file transfer:

• An entry level single channel

• An enterprise level dual-channel

• A high security level fully-redundant

All versions feature single-direction isolating GBE performance, Copper and Fibre TCP/UDP over IP connectivity and high quality construction. AROW is optimised for le transfer over TCP  and can be used in conjunction with software lters and  or with the supplied AROWBftp software.  This opensource Python code allows automatic management of le transfers, TCP and UDP  stream data, web-site transmission etc and can be easily audited, extended or customised to your specic needs. Customisation can be done either by us or your own developers or system administrators. AROW can be also used as a direct connection for existing TCP/UDP/Multicast streams utilising the ultra-high speed capability of the dedicated hardware. AROW is designed and manufactured in the UK

 XD Air is an integrated hardware/software package that inspects and cleans files on portable media of malware and other malicious content. A laptop-based kiosk, XD Air was developed in conjunction with the National Security Agency as a file sanitization tool to enable the safe use of portable media. In the six years since its development, more than 1,000 XD Air systems have been successfully deployed in government, nuclear, and commercial environments.

Application Flexibility Proven in a variety of government and critical infrastructure applications, XD Air:

• Protects against media-borne and data-borne threats when transferring data to secure or critical networks.

• Enables assured transfer of classified data between high-risk networks using portable media (meets the requirements of JTF-GNO CTO-10-004A for Removable Flash Media Device Implementation).

• Assists in publishing digital documents by exposing hidden content and verifying cleansing before release—helping ensure that classified or confidential data is not inadvertently disseminated.

• Verifies the authenticity of content from trusted sources.

How It Works

• Inspects and cleans files on removable media to mitigate the risk of introducing malicious content

• Offers three methods of protection: Known Good, Known Bad and Known Source

• Applies advanced filtering techniques to perform deep content inspection of complex file types, exposing hidden threats and data missed by conventional antivirus and anti-malware protection

• XD Air is hardened against attacks from media-borne malware

• Securely erases media

VADO Security develops and markets Network Data Diodes for national governments, Gas & Oil Industries, Banking and more, guarding against cyber attacks.
Vado is a manufacturer of data diode systems. The Vado diode is composed of hardware & software (called "agents"). The hardware diode is composed of a TX hardware unit and an RX hardware unit. The units are connected to servers on each side via ethernet cables and connected to each other (TX to RX) via a single fiber optic cable. The VADO One Way Data Diode appliance is designed to allow unidirectional data transfer to networks that must be physically detached for security reasons, such as R&D and production systems in the defense industry. The main features of VADO One Way Data Diode:

• Proven Technology