Physical

backup hashing and verification

link to failure rate study

Processor

3, 2, 1 backup + hashing

Network Control

ransomware - backup exfiltration - encryption timebomb - time triggered computation change

Highest threat:

• quickest way to delete data
• timebombs

Network Access:

• Data
  • Continous: Connectivity, integrity
  • Intermittent: integrity

Purge to cold storage

[] - [] - []

• first is online
• second is a ferry
• third is never online

second is required to prevent the third from occassionally going online (first is always online)

what prevents a packet replay attack? I could send the (encrypted) login packet to login somewhere else