Multi-layered Architecture for Secure Inter-network Data Transfer using Data Diode

Secure data transfer between public network and private network within an organization is a significant area of concern. Manual methods of burning data to disk or copying to USB devices and then reloading in private network raises major security risks. These risks include malware infection, data loss, etc. In addition, majority of the companies forbids the use of USBs and other portable storage devices. A unidirectional network bridge (data diode) that serves as a oneway gateway between two networks with different security classifications can be utilized to bypass this manual technique. Data diode alone will not suffice the security requirements of inter-network data transfer. By implementing numerous levels of defense and a segmented network, cross-network communication path can be secured against security compromise. This paper discusses on the multi-layered architecture and the network segmentation implemented to establish a secure inter-network data transfer solution with the help of a commercial data diode.