Air-Gapped Backup
What is Air-Gapped Backup
Air-gapped backup is a backup copy that is kept separate from the systems and networks containing the original data. The separation may use physical disconnection or controlled network isolation. This keeps a threat in the primary environment from directly accessing the backup.
How Does Air-Gapped Backup Work?
Air-gapped backup works by disconnecting backup storage from the production environment when it is not being used for a backup or recovery operation. The backup data is not available through the normal network connections used by the primary systems.
For instance, an organization may copy its critical data to storage and take that storage offline after the backup finishes. If ransomware compromises the production network, the disconnected backup cannot be reached through that network. When recovery is needed, authorized personnel reconnect or access the backup according to the established procedures.
Key Characteristics of Air-Gapped Backup
- Isolation of a physical or logical nature: Backup storage is isolated from production, systems, via, physical, isolation, or via controlled access to the network.
- No persistent connectivity: The backup does not maintain a constant connection with the production network.
- Controlled access: Backup and recovery access adheres to established rules and procedures.
- Copy of backup independently: The information remains preserved outside the primary environment.
- Protection from loss: The isolation limits the impact of a security incident on the primary data, and the backup data.
Benefits of Air-Gapped Backup
- Ransomware protection: Ransomware running on the production systems cannot propagate directly to a backup that is in a network disconnected from the production network.
- Gives less exposure to attack: Applications, users, and compromised production systems cannot reach the backup via the standard network path.
- Data recovery: The disconnected backup acts as a backup source for data recovery when the data is not available or lost.
- Limited access: Less availability of connectivity means less number of attackers can access the backup data.
- Backup resilience: Storing a separate copy of the backup helps to minimize the chance that a security event will impact both copies.
Air-Gapped Backup in Cloud Computing
Air-gapped backup in cloud environments uses separate backup accounts, storage environments, and restricted network access to keep backup data apart from production resources. Access controls, immutable storage, and separation between production and backup resources can also be used to limit exposure.
For example, an organization may store backup data in a separate cloud account with restricted credentials and no direct network path from its production environment. Only authorized recovery operations can access the backup. A compromise of the primary cloud environment does not automatically provide access to the isolated backup.