Metraipolis › archive › dc_f82209b02ca6

Implementing Data Diodes Using Commodity Hardware and Open Source Software — arXiv:2609.35256

Source: arXiv (en)
Original: https://arxiv.org/abs/2609.35256
License (as archived): CC0-1.0
Archived: 2026-10-07T22:34:54.324Z
SHA-256 of the archived text: 31361d73c1ace9ee6d75f21330cc604c9cfdeda6f07b5cb86d3570e9a37a580f
Stable URL of this page: https://metraipolis.com/documento/dc_f82209b02ca6

How to cite

Implementing Data Diodes Using Commodity Hardware and Open Source Software — arXiv:2609.35256 — arXiv (en), https://arxiv.org/abs/2609.35256 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_f82209b02ca6 (Metraipolis archive dc_f82209b02ca6, sha256 31361d73c1ace9ee6d75f21330cc604c9cfdeda6f07b5cb86d3570e9a37a580f)

BibTeX

@misc{dcf82209b02ca6,
  title = {Implementing Data Diodes Using Commodity Hardware and Open Source Software — arXiv:2609.35256},
  howpublished = {arXiv (en)},
  url = {https://arxiv.org/abs/2609.35256},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_f82209b02ca6; sha256 31361d73c1ace9ee6d75f21330cc604c9cfdeda6f07b5cb86d3570e9a37a580f},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: arXiv (en), https://arxiv.org/abs/2609.35256. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

One-way network devices, known as data diodes, are used to defend against sophisticated cyberattacks. Partly due to their high cost, data diodes are mostly deployed in nuclear power plants and within the government for handling classified information. Although commercially available data diodes are expensive, a data diode's hardware can assembled from commodity fiber-optic network equipment. However, specialized software is needed to send data through a data diode reliably: the receiving program cannot request retransmission of dropped packets, so packet loss must be minimized and mitigated. First, we developed a minimal program to measure packet loss. We found that most packet loss was caused by the receiving program processing incoming packets too slowly, and that packet loss often occurs in clusters. Also, we discovered ways to minimize packet loss on Linux and macOS without using superuser privileges. Next, we tested three existing open source programs for one-way data transfers: netcat, UDPcast, and lidi. Although these programs were unreliable in their default configurations, we identified reliable configurations for UDPcast and lidi. Finally, we incorporated our findings into pydiode, our cross-platform program for reliable one-way data transfers.

Tema degli esploratori: fiducia digitale e crittografia (retro-catalogo arXiv: annunci del 2026-09-29 in cs.CR).
Categorie arXiv: Cryptography and Security (cs.CR) ; Networking and Internet Architecture (cs.NI).
Pagina del lavoro: https://arxiv.org/abs/2609.35256 — autori e testo completo sono lì (qui omessi i nomi: nessun dato personale nel deposito).
Licenza: titolo e abstract sono metadati arXiv distribuiti in CC0 1.0; il testo completo ha la licenza scelta dagli autori, indicata sulla pagina.
Letto il 2026-10-07T22:13:03.740Z dalla pagina https://arxiv.org/catchup/cs.CR/2026-09-29?abs=True (consentita dal robots.txt di arxiv.org, con il suo crawl-delay).