Fri Jul 18 02:43:30 UTC 2008

Air Gap data transfer

--

Problem: you want to pass data between systems, but want to guard against metadata or content exploits.

Example: users upload images, which you need to process.

Threat: Standard JPG library buffer overruns.

Solution: Air Gap

Example: Upload machine displays the uploaded image onto the screen. Application machine uses a webcam to scan/record the image. No metadata can be preserved.