An air-gapped network is one that has no connection to other networks, including the internet. The idea is simple and powerful: if there is no link, network-borne attacks cannot reach the protected systems across one.
Air gapping is often described as the strongest isolation available, and in a narrow sense it is. But a true air gap is also demanding to operate, and the gap tends to erode in practice. This article explains what an air gap really protects against, where it falls short, and the modern alternatives that keep most of the benefit.
01Key takeaways
- 01
An air-gapped network has no connection to other networks, so it cannot be attacked across a network link.
- 02
The protection is real but narrow: it addresses network reachability, not physical or human paths.
- 03
Removable media, insiders and supply chain remain ways in, and notable malware has crossed air gaps via USB.
- 04
True air gaps are operationally costly and tend to erode as people add connectivity for convenience.
- 05
Modern alternatives such as one-way transfer and time-based disconnection keep most of the benefit while remaining workable.
02What is an air-gapped network?
An air-gapped network is physically and logically separated from other networks. There is no wired or wireless path between it and the outside world, so data cannot flow across a network connection that does not exist.
The term comes from the literal gap of air between systems. It is used for the most sensitive environments: classified networks, certain critical infrastructure, and systems whose compromise would be catastrophic.
Short version: an air gap removes the network path entirely, rather than trying to control it.
03How a true air gap works
A genuine air gap means no network connectivity of any kind between the protected environment and others: no cables bridging the two, no shared switches, and no wireless interfaces that could form a link.
Because nothing crosses the gap over the network, any data that must move in or out has to do so by some deliberate, non-network means. That constraint is the whole point, and also the source of every practical difficulty an air gap creates.
04What an air gap protects against
An air gap is effective against the large class of threats that depend on network reachability. If an attacker cannot reach a system over a network, a whole set of techniques becomes unavailable.
- Remote exploitation of services exposed on a network.
- Lateral movement from a compromised external or enterprise system.
- Command-and-control channels that rely on a network path home.
- Opportunistic internet scanning and mass exploitation.
- Direct exfiltration of data across a network link.
05The limits of an air gap
An air gap only removes the network path. It does nothing about the other ways data and code move, which is where real-world air gaps are breached.
- Removable media
- USB drives and other media carry data and malware across the gap physically. Notable industrial malware has reached air-gapped systems this way.
- Insiders
- People with legitimate access can move data in or out, intentionally or by mistake, regardless of the gap.
- Supply chain
- Compromised software, firmware or hardware can arrive already carrying a threat, before the gap is even relevant.
- Operational cost
- Every legitimate data exchange becomes a manual process, which is slow, error-prone and resented.
06Why pure air gaps are rare and erode
Because air gaps are so costly to operate, the pressure to bridge them is constant. Someone needs to get data out for reporting, someone needs to bring an update in, and each need is met with a temporary connection or a USB drive that becomes permanent habit.
Over time many supposedly air-gapped networks accumulate quiet connections, dual-homed machines and routine media transfers. The gap exists on the architecture diagram but not in reality, which can be worse than an honest, controlled connection because the risk is unmanaged and unseen.
07Modern alternatives to a pure air gap
The goal behind an air gap is usually not literal disconnection; it is to ensure systems cannot be reached when they do not need to be. That goal can be met with controls that are easier to operate and harder to erode.
- One-way transfer lets data leave without creating a return path, replacing manual export for many flows.
- Time-based disconnection keeps systems offline by default and connected only for approved windows.
- Strict media control and sanitization for the transfers that must remain physical.
- Segmentation so that even connected boundaries are tightly governed.
An AIRGAPNET controlled connectivity pattern applies this directly: a hardware-enforced physical break that keeps an asset disconnected by default and reconnects it only on schedule or on demand. It preserves the spirit of the air gap while giving operators a controlled, auditable way to move data when they genuinely need to.
08Closing thought
An air gap is not magic, and it is not obsolete. It is a strong control against network-borne threats and a weak one against everything else, and it survives only where the discipline to maintain it survives.
Ask what the gap is really for. If the aim is to keep systems unreachable when they do not need to be reached, a controlled, hardware-enforced disconnection often delivers that better than a pure air gap that quietly fills with exceptions.
FAQFrequently asked questions
What is an air-gapped network?
An air-gapped network has no wired or wireless connection to other networks, including the internet. Because there is no network path, network-borne attacks cannot reach the protected systems across one.
Are air-gapped networks completely secure?
No. An air gap only removes the network path. Removable media, insiders and supply chain compromise remain ways in, and notable malware has crossed air gaps via USB drives. It is strong against network attacks and weak against physical and human paths.
Why do air gaps erode over time?
Because operating a true air gap is costly, people add temporary connections or routine USB transfers to move data for reporting or updates. Over time these become permanent, so the gap exists on the diagram but not in reality.
What are the alternatives to an air gap?
One-way transfer lets data leave without a return path, and time-based disconnection keeps systems offline by default and connected only for approved windows. Combined with media control and segmentation, these keep most of the benefit while remaining operable.
Is a controlled disconnection better than a pure air gap?
Often, yes. If the goal is to keep systems unreachable when they do not need to be reached, hardware-enforced scheduled disconnection delivers that in an auditable way and resists the erosion that fills pure air gaps with unmanaged exceptions.
SRCSources of record
Keep the spirit, lose the fragility
Get air-gap-grade isolation you can actually operate.
Keep assets disconnected by default and reconnect them only on schedule or on demand, so isolation holds without the manual cost that erodes a pure air gap.