one-way information flow

A security architecture property — and its corresponding enforcement mechanism — that permits data to travel in only one direction between two domains, networks, or trust boundaries, making any reverse channel physically or logically impossible. It is distinguished from ordinary access control by its absolute, non-negotiable directionality: when information must be transferred between isolated networks of differing confidentiality or integrity, established information security models such as Bell-LaPadula and Biba favor implementation of one-way information flow controls, because bidirectionality — even the mere capability of it — constitutes a security or integrity risk. NIST SP 800-53 AC-4(7) requires organizations to enforce one-way information flows through hardware-based flow control mechanisms, and notes that such mechanisms may also be referred to as a unidirectional network, unidirectional security gateway, or data diode. In practice the field uses it to describe the goal (the directional property to be enforced), the policy (the rule stating that data must not cross a boundary in the prohibited direction), and the class of control (software filters, or more robustly, hardw

Advisory only. A term this product ships is defined by an authority document, not by a search result.