The Airgap Paradox: Adversarial Tactics & Defensible Design
summary
Air gaps only buy time: past breaches like Agent BTZ (year‑long cleanup of a Supernet worm) and Stuckset (air gap jump via USB using four zeroday exploits and stolen certificates that physically damaged centrifuges) show common vectors are USBs, vendor laptops and covert channels (blinking LEDs, fan‑speed or RF exfiltration). Build for data integrity or data isolation explicitly, appoint a data transfer officer with authority, stage and test offline builds, sanitize everything and ship logs to a SIEM — isolation without technical controls is false confidence.
AI-written summary · about
chapters (10)
- 0:00Introduction to the Air Gap Paradox
- 0:15Speaker Background and Credentials
- 1:03Purpose of the Talk
- 1:44Understanding Air Gaps
- 2:53Who Uses Air Gaps?
- 4:03Notable Air Gap Breaches
- 6:14Attacking the Air Gap
- 8:05Securing the Air Gap
- 10:21Building a Data Integrity Air Gap
- 13:55Final Thoughts on Air Gaps
related talks
40mEnemy Inside the Gates: Securing the New Battleground
33mSo you think you can airgap? (No.)
21mThe New Ground Truth for Security
48mAssume Compromise: Think Like a Hacker to Build Resilience
46mApplication security from start to finish
45mDefenders Struggle as the Adversary Continues to Break Away
59mIf You Can't Open It, You Don't Own It
52mContinuous Security