Hardware–Software Complex One-Way Security Gateway (OSG) PLASMA DD: What It Is and How It Works

The hardware–software complex One-Way Security Gateway (OSG) PLASMA DD, also known as a data diode, is designed to establish a one-directional connection between two networks with different security levels, in which information is physically transmitted in only one direction.

How Does a Data Diode Work?

The data diode implements hardware physical isolation of data transmission channels. In the classical architecture, it consists of a sending module and a receiving module, connected by an optical channel that allows data to flow in only one direction. This ensures a guaranteed one-way flow of information and physically prevents data transmission in the opposite direction.

This design is significantly different from software solutions such as firewalls or proxies: the data diode does not use filtering rules or access policies, but hardware prohibits any feedback, making it virtually impervious to cyberattacks.

Advantages of OSHB PLASMA DD:

• A modern and reliable information protection solution that provides the highest possible level of guarantees;
• Ukrainian product that has passed the examination of the State Service for Special Communications and Information Protection of Ukraine;
• Constant development of new functionality to solve end-user problems and support by qualified specialists;
• OSHB PLASMA DD is already protecting the state information resources of Ukraine.

Examples of using PLASMA DD OSHB:

• Transfer of accident and alarm log data from industrial networks to the IT/management segment without the risk of interfering with the technological control of the OT network;
• Secure monitoring of dispatch data from urban infrastructure (water canals, heating networks);
• Protection of internal banking systems, transaction accounting systems, customer databases, internal registers, payment gateways;
• Updating antivirus databases from an external network;
• Transferring data from medical information systems without the risk that an external network will be able to interfere with processes within the system;
• Distinguishing between «clean» and external networks when working with intellectual property.

A data diode (unidirectional security gateway) is a hardware-based mechanism that physically guarantees one-way data flow between network segments with different levels of trust. Due to the absence of a return channel, it provides one of the highest levels of protection for critical infrastructures, helping to avoid cyberattacks and maintain the integrity and security of OT/ICS systems, critical services and information.

If you are interested in the topic, you can follow the following link to learn more about (OSHB) PLASMA DD: https://youtu.be/DGQnAz7fKBA?si=kD43TP-0DJdUvyP9