3 ms·
I've seen air-gapped computers infested with malware. Portable storage devices can easily host malware. Air-gapped machines are more likely to have old, exploit
by EvanAnderson 14y ago
I've seen air-gapped computers infested with malware. Portable storage devices can easily host malware. Air-gapped machines are more likely to have old, exploitable vulnerabilities, since they're not able to receive updates over the network and some people erroneously believe that being air-gapped makes them more "secure".
Edit: External media connectivity is typically used for updates. It's much more convenient to have a USB port that will use an off-the-shelf mass storage device than a JTAG and a custom programmer.
- alanctgardner2 14y agoFor something like a fetal heart monitor, which has been certified to work in exactly one configuration, why would you allow external media? Have an internal network, and lock down every device. If nurses want to have a computer to use for Facebook, it can be on a separate, non-medical network.
- deleted 14y ago[deleted]
- xenophonf 14y agoYou'd allow external media because you need the data off the device somehow. Unfortunately, if the monitor uses a COTS operating system (doesn't matter which), that's one way in for malware. Unlike their military applications, air gaps in health care settings aren't there to protect confidentiality, but availability.