Information Exchange between Resilient and High-Threat Networks:

High resilience military networks frequently have requirements for exchange of information with networks of low assurance, including networks of unknown threat such as the Internet. Traditionally, the approach to solving this problem is an air-gap between the two domains, with information exchanged between them on floppy disk. This approach is both time-consuming and potentially risky. This paper proposes alternative techniques to enable assured, two-way, information flow between high resilience networks and other networks of unknown threat. The techniques include conventional and novel technologies designed to control and constrain information formats, manage the environment between domains with network level controls, and provide assured, user-instigated, release sanctions.