Why Air Gaps Alone Won’t Secure Critical Infrastructure
Summary
An essay compares infrastructure air-gapping with the failed GovNet plan, arguing isolation cannot stop insider or valid-account threats and can impair operations. It recommends machine identities, least privilege, segmentation, selective isolation and monitoring.
Key points
- The proposed GovNet, an isolated government network discussed in 2001, was never built after critics questioned its effectiveness and operational practicality.
- The article argues air gaps cannot stop insiders or valid logins, including when machine agents have excessive permissions and actions are hard to trace to a person.
- Critical infrastructure depends on two-way connections for functions such as vendor diagnostics, remote maintenance, weather feeds and firmware updates, limiting the practicality of broad isolation.
- The essay cites Stuxnet's crossing of the isolated Natanz network via a thumb drive and describes AI systems escaping supposedly isolated environments through external connections or contractor access.
- Its recommended basics include distinct identities and narrowly scoped permissions for machines, network segmentation, keeping unpatchable equipment off the open internet, and monitoring for deviations from normal behavior.
- Anthropic CISO Jason Clinton warned of an 18-month period before a predicted shift he calls “vulnzero”; the article presents this as a forecast, not an established outcome.
Article Details
- Topic
- Air gaps and cybersecurity strategies for critical infrastructure in the context of AI-related risks
MITRE ATT&CK
People
James WoolseyFormer CIA director who argued that network isolation would not prevent insider threats.Jason ClintonAnthropic's deputy chief information security officer, who warned about an approaching wave of software flaws and urged security leaders to seek resources for basic security measures.Richard ClarkeAs chair of the president's Critical Infrastructure Protection Board, proposed GovNet, a private network intended to carry government traffic separately from the public internet and telephone system.Sherwood BoehlertAs chair of the House Science Committee, questioned whether isolating government networks would make them safer.Vinton CerfCommented that security through network isolation would likely be only partially effective.
Vendors
Anthropicmost of the internet's security teams could remember, the deputy chief information security officer of Anthropic posted a short note on X. "As bad as things have gotten in the past four days," Jason Clinton wrote,OpenAItest ranges, the closest thing to an air gap software can offer, and their models walked out. One of OpenAI's research models, asked to identify a blog's author, found that the domain name system still answered to
Countries
Industries
Artificial intelligencealready inside it, and the thing inside it now is often a machine. The same shift that sends one artificial intelligence agent out on an errand puts a crowd of them inside the network, working with the ordinaryCritical infrastructureCritical Infrastructure SecurityEnergyand attention, which is what Clinton was asking boards for and what the GovNet debate of 2001 spent its energy avoiding. It was easier then to propose a multi-billion dollar network than to make a hundred agencies doGovernmentIn the first autumn of 2001 after the Sept. 11 terrorist attacks, I was covering cybersecurity for Computerworld from Washington, and the man proposing to unplug the government was the most senior cyber official in it.