Air Gaps
An air gap is a security measure that physically or logically isolates a computer system or network from unsecured networks, particularly the internet. By eliminating direct connections between sensitive systems and external networks, air gaps remove a primary attack vector for remote compromise. This isolation prevents unauthorized access and data exfiltration by ensuring that attackers cannot reach protected systems through network-based attacks, regardless of the vulnerabilities present in connected infrastructure.
Implementation Methods
Air gaps can be implemented either physically, by keeping systems completely disconnected from networks, or logically, through firewalls and network segmentation that restrict data flow between protected and untrusted systems. Physical air gaps provide the strongest isolation but limit legitimate data transfer, requiring manual or carefully controlled processes for moving information between systems. Logical air gaps offer more operational flexibility while still creating substantial barriers to unauthorized access.
Common Applications
Air-gapped systems are commonly used in critical infrastructure environments, including power grids, industrial control systems, and nuclear facilities, where network compromise could have severe consequences. Financial institutions, government agencies, and organizations handling classified information also employ air gaps to protect sensitive data. Even non-critical systems may use air gaps when the security requirements justify the operational limitations they impose.
Limitations and Trade-offs
While effective against remote attacks, air gaps do not protect against insider threats, physical theft, or attacks delivered through removable media or other offline channels. Maintaining an air-gapped system requires strict data handling procedures and ongoing security discipline. The operational burden of transferring data to and from isolated systems can create pressure to compromise the isolation, making proper policy enforcement essential to the effectiveness of the approach.
Source Notes
- 2026-04-07: Karpathy
- 2026-04-10: Karpathys LLM Wiki Beyond RAG for Persistent Knowledge Bases · ▶ source
- 2026-04-12: Heres what it actually does how to build it yourself
- 2026-04-20: Knowledge Graphs Advancing Karpathys LLM Wiki for Deeper Insights · ▶ source