Data Diodes for Secure Process Data Access

This white paper discusses the use of data diodes in industrial cybersecurity architectures to facilitate secure one-way data flow while protecting operational technology (OT) networks from cyber threats. It outlines the challenges industrial organizations face in accessing process data amidst increasing security risks and the limitations of standard industrial protocols in conjunction with data diodes. The document explains how the tunnel/mirror architecture employed by Cogent DataHub software can overcome these limitations by encapsulating source protocols within unidirectional transport, allowing for secure and consistent data access. Additionally, it covers various technical considerations, including the need for store-and-forward capabilities and the implications of using TCP or UDP protocols in this context. The paper ultimately emphasizes that while data diodes provide robust security, the specific needs of the application should determine their suitability compared to other security measures like firewalls and DMZs.