The Concept

• Sever all links to untrusted networks
• Disable Wi-Fi, Bluetooth, cellular, and NFC
• Keep the device offline and storage only
• Allow no host USB connections

How It Works

• Dedicate a device to the air gap
• Enable no network interfaces
• Control physical access tightly
• Use Faraday containment when possible

One-Way Data Flow

• Create and edit on the isolated device
• Export to sanitized removable media
• Move media through trusted channels
• Import only onto another air-gapped device

Media Discipline

• Use new or dedicated media only
• Scan on a clean system first
• Full-wipe media after every use
• Track chain of custody in a case

Harden the Device

• Remove or epoxy unnecessary ports
• Boot from trusted, read-only media
• Allowlist applications; encrypt at rest
• Disable auto-run and removable execution

Physical Control

• Lock devices; allow no unattended access
• Apply tamper seals and check them
• Vet hardware sources for tampering
• Avoid pre-owned hardware when possible

Environment

• Avoid RF-leaky locations
• Use Faraday shielding when needed
• Beware leakage from cables and LEDs
• Power down when the device is idle

Operator Behavior

• Assume observation at all times
• Minimize and vary your patterns
• Change routes and timings
• Assume compromise; wipe and rebuild