Air gaps never exist (2011)

#1

Post by cba9 » Thu, Dec 03, 2015, 11:02 PM UTC

Air gaps never exist (2011)
gse-compliance.blogspot.com

Re: Air gaps never exist (2011)

#2

Post by hackuser » Thu, Dec 03, 2015, 11:14 PM UTC

> the blue cables in gas filled tubes

Cat5/6 cables? Why would they be in gas-filled tubes?

Re: Air gaps never exist (2011)

#3

Post by cba9 » Thu, Dec 03, 2015, 11:19 PM UTC

hackuser wrote: post #2

> the blue cables in gas filled tubes Cat5/6 cables? Why would they be in gas-filled tubes?

Good question - I have no idea. But if I google 'gas-filled tube ethernet', I get a number of hits like http://en.tdk.eu/blob/174150/download/5/smd-surge-arresters-... and http://www.first-electronic.com/uploadfile/2010989552637708.... which suggest that these products are sold for networking purposes to prevent surges. Since this is in a military context, I would hazard a guess that this may be some sort of standard hardening requirement to try to protect the datacenter against lightning strikes, EMPs (such as from nuclear strikes), and general accidents. This may sound paranoid, but then again, so do Faraday cages, and it is the military - it's their job.

Re: Air gaps never exist (2011)

#4

Post by dkbrk » Fri, Dec 04, 2015, 9:13 PM UTC

cba9 wrote: post #3

hackuser wrote: post #2

> the blue cables in gas filled tubes Cat5/6 cables? Why would they be in gas-filled tubes?

Good question - I have no idea. But if I google 'gas-filled tube ethernet', I get a number of hits like http://en.tdk.eu/blob/174150/download/5/smd-surge-arresters-... and http://www.first-electronic.com/uploadfile/2010989552637708.... which suggest that these products are sold for networking purposes to prevent surges. Since this is in a military context, I would hazard a guess that this may be some sort of standard…

The wording didn't sound like he was talking about a gas-discharge tube for surge protection. Also, that wouldn't have anything to do with security.

I think what may be happening is the ethernet cable runs are in sealed tubes running at either positive or negative pressure so that if someone tries to breach the tube and splice onto the cable it would be detected by a pressure sensor.

Re: Air gaps never exist (2011)

#5

Post by undersuit » Fri, Dec 04, 2015, 9:15 PM UTC

hackuser wrote: post #2

> the blue cables in gas filled tubes Cat5/6 cables? Why would they be in gas-filled tubes?

Other responder might be more right, but I was thinking about how hard it would be to discreetly tap into a ethernet cable when I have to break glass.

Re: Air gaps never exist (2011)

#6

Post by genericresponse » Fri, Dec 04, 2015, 9:34 PM UTC

That's why you commit to multiple layers and types of defensive and recovery measures. Intelligence, preparation, prevention, prevention, prevention, monitoring, adaptation, more monitoring, effective response, well planned recovery.

Re: Air gaps never exist (2011)

#7

Post by elchief » Fri, Dec 04, 2015, 9:46 PM UTC

Pedantically, not a "gap" if there's a network cable going to another network...

Re: Air gaps never exist (2011)

#8

Post by [deleted] » Fri, Dec 04, 2015, 9:47 PM UTC

[deleted]

Re: Air gaps never exist (2011)

#9

Post by tlrobinson » Fri, Dec 04, 2015, 9:49 PM UTC

Doesn't "air gapped" imply physical separation? Putting a firewall, even if it's totally locked down, between two networks does not make it "air gapped".

Re: Air gaps never exist (2011)

#10

Post by peterwwillis » Fri, Dec 04, 2015, 9:53 PM UTC

hackuser wrote: post #2

> the blue cables in gas filled tubes Cat5/6 cables? Why would they be in gas-filled tubes?

https://webcache.googleusercontent.com/search?q=cache:wZ0Cex...

http://www.gocsc.com/userfiles/file/ortronics/whitepapergovt...

https://security.stackexchange.com/questions/10447/is-the-us...

I'm honestly not familiar with these kinds of facilities, but with a potential "Collateral Confidential" type cable, one could imagine a gas-filled tube being a countermeasure of some sort.