Skip to content

Latest commit

 

History

History
148 lines (81 loc) · 4.41 KB

external_content.md

File metadata and controls

148 lines (81 loc) · 4.41 KB

Youtube presentations / Webinars

Webinar CSIAC: Physical Cybersecurity: Using One-Way Data Diodes to Secure Asset Monitoring


Duration 1:04:27

IMAGE ALT TEXT HERE

Slides: https://csiac.org/wp-content/uploads/2021/11/CSIAC_Deck_Final_1-2022.pdf

ESTCP project overview Data Diodes

https://youtube.com/watch?v=HC3_Dd8KM0E&si=EnSIkaIECMiOmarE
https://www.serdp-estcp.org/projects/details/30717e9d-8325-43fd-a813-6396ae5f7ff6/ew19-5156-project-overview

SANS Institute 2003, As part of GIAC practical repository.

Unidirectional Networking
GIAC Security Essential Certification Practical Assignment Version 1.4b
Jason Westmacot
https://www.giac.org/paper/gsec/2848/unidirectional-networking/104817

Vendors

Link22

https://link22.eu/products/diode-proxy/

Projects

FLUTE - File Delivery over Unidirectional Transport

Massively scalable multicast distribution solution

The library implements a unidirectional file delivery, without the need of a return channel. https://github.com/ypo/flute

LIDI - Transfer a raw TCP or Unix stream or files through a unidirectional link with forward error correction

High-speed data diode software developed in rust by the French cybersecurity agency, with raptorq error correction.

https://github.com/ANSSI-FR/lidi

Documentation: https://anssi-fr.github.io/lidi/

UDPcast as a service

https://github.com/azzid/pmddft

Helpful links

Building an Affordable Data Diode to Protect Journalists

Python alternative for UDPcast. Paper claims no packetloss.

https://github.com/ClarkuCSCI/pydiode paper: https://pep23.com/assets/pdf/pep23-paper7.pdf

Wavestone-cdt DIY Dyode

DIY Datadiode using 3 copper to fiber converters and a light version using 2 PI zero's and an optocoupler.

Software includes

  • Modbus data transfer
  • File transfer (DYODE full only)
  • Screen sharing (DYODE full only)

https://github.com/wavestone-cdt/dyode

EBUJOLD data-diode

DIY data-diode like the Wavestone solution. Good explanation about the configuration of the media converters in the wiki under hardware.

https://github.com/EBUJOLD/data-diode

Klockcykel Godiode

DIY Data-diode using 2 modded TP-link copper to fiber converters. Costs +- €65,-

Software includes Go code and Docker. Transfer speed up to 750Mbit.

Please note: Soldering requires a microscope due to the size of the pcb

https://github.com/klockcykel/godiode

Design for a TCP/IP transparent FPGA-based network diode

Design for a TCP/IP transparent FPGA-based network diode by J. Kerkhof to obtain the degree of Master of Science in Copmuter Engineering at the Delft University of Technology, to be defended publicly on January 27, 2020 at 10:00 AM.

https://repository.tudelft.nl/islandora/object/uuid:1cfcbc79-910a-41e5-8a2f-3a43b3c6abb3/datastream/OBJ/download

Mitcdh

Example how to configure a Cisco switch as a data-diode

https://github.com/mitcdh/diode-switch-config

svenseeberg

Example using Raspberry PI's

https://github.com/svenseeberg/data-diode

Dutch Open Source Datadiode project

Dutch project to build an open source datadiode

https://securitydelta.nl/nl/projects/project/99-open-source-data-diode

Georgesrusu

Webportal in combination with BlindFTP (not tested). Read the (good) report first.

https://github.com/georgesrusu/managementSecuDataDiode/blob/master/Rapport/rapport.pdf

Cylab-be

Good resource for documentation and webbased solution.

https://gitlab.cylab.be/cylab/data-diode

MeghaSharma31

Nice report on data-diodes using the ATM protocol.

https://github.com/MeghaSharma31

Cea-sec Hairgap

Hairgap is a set of tools to transfer data over a unidirectional network link. (Aplha)

https://github.com/cea-sec/hairgap

Bhanq

The goal of this project was to implement a (virtual) Data Diode according to some CyberSecurity frameworks NIST SP 800-30 : Risk analysis report and Common criteria.

https://github.com/BHanq/DataDiode

TFC

https://github.com/maqp/tfc/wiki/TTL-Data-Diode-(PCB)
https://www.kitploit.com/2020/03/tinfoil-chat-onion-routed-endpoint.html

Leaky Diode

Leaky diode is a data exfiltration test tool for smart data diodes, that is data diodes with support for TCP pass-through with the help of some side channel from the isolated side. The attacks used are flow modulation and/or close.
https://github.com/secnot/leaky_diode