# Air gap

> Keeping a computer or network physically cut off from everything, internet included.

- Level: Intermediate
- Topics: Security, Networks
- URL: https://tidbit.legios.com.ar/air-gap/
- In Spanish: [Air gap](https://tidbit.legios.com.ar/es/air-gap/)

An **air gap** means there is literally nothing but air between a sensitive system and the outside world: no cable, no Wi-Fi, no Bluetooth, no connection to the internet or to the office network. If an attacker cannot reach a machine over a network, a whole category of remote attacks simply does not apply. Systems built this way are called **air-gapped**.

It is used where the stakes are high: military and intelligence networks that handle classified information, the control systems of power plants and factories, voting tabulation machines in some places, and the offline copy of a company's backups. A ransomware gang that takes over the whole office network still cannot encrypt a backup that sits disconnected in a safe. Cold wallets for cryptocurrency follow the same idea.

An air gap is strong but not magic. Data still has to move in and out somehow, often on USB drives, and that is the weak point. The Stuxnet worm, discovered in 2010, is thought to have reached isolated Iranian nuclear equipment that way, then quietly damaged the centrifuges. Insiders can also carry things across, and researchers have shown exotic leaks through sound, heat or blinking lights. The cost is convenience: every update and every file transfer becomes a manual, controlled procedure.

## An analogy

Keeping your most important papers in a safe deposit box instead of in a drawer at home. Nobody can get at them through the window, but someone still has to carry things in and out by hand, and that trip is where the risk is.

## Keep in mind

- No network connection at all: physically separated from the outside.
- Used for classified networks, industrial control and offline backups.
- USB drives and people crossing the gap are the usual weak point.
- Stuxnet showed that an air gap reduces risk but does not erase it.

## Go deeper

- [Air gap (networking) on Wikipedia](https://en.wikipedia.org/wiki/Air_gap_(networking))
- [Stuxnet on Wikipedia](https://en.wikipedia.org/wiki/Stuxnet)
- [Air gap (NIST glossary)](https://csrc.nist.gov/glossary/term/air_gap)

## Related terms

- [Wi-Fi](https://tidbit.legios.com.ar/wi-fi/): Networking over radio waves: the internet without the cable, within a few rooms.
- [Bluetooth](https://tidbit.legios.com.ar/bluetooth/): Short-range wireless for connecting nearby gadgets: headphones, watches, keyboards.
- [Internet](https://tidbit.legios.com.ar/internet/): A worldwide network of networks that lets any connected device reach any other.
- [Backup](https://tidbit.legios.com.ar/backup/): A separate copy of your data, kept so you can get it back when the original is lost.
- [Malware and ransomware](https://tidbit.legios.com.ar/malware-and-ransomware/): Software built to harm you; ransomware locks your files and charges to unlock them.
- [Encryption](https://tidbit.legios.com.ar/encryption/): Scrambling data so that only someone with the key can read it.
- [USB](https://tidbit.legios.com.ar/usb/): The standard plug for connecting and charging almost everything.