Data Diode for Cyber-security: A Review

The rapid growth in network usage and availability has exposed this field to denser and more sophisticated attacks. Sensitive and critical data has been transported over those network nodes and devices, which made them an attack vector to be exploited to gain information or data. To uphold the advantages of the networked systems some data need to be sent out over the highly secure channel. Previous technologies like Firewalls and ACLs being used to pass the data from a highly secure logical area to a lower logical area due to their software nature are proving to be fighting a losing battle with the attackers. Therefore, in the recent past physical security device Aka. Data Diodes which are secure by design and have no documented evidence of flow being reversed are gaining more attention. Unlike software, parameters can tamper, and that leads it to be implemented for those situations in which data need to be secured and protected, while still ensuring full separation between the outside world and the inside world, as data diode can be ranged depending on their complexity from EVL 1 up to EVL 3 in terms of their security strength. In this paper, we provide a comprehensive review of the recent research efforts spared for the data-diodes ranging from their manufacturing to their applications. Furthermore, the paper presents a comparison of data-diodes from options offered by reputed vendors, highlighting the strengths and weekness of each of them.