The Air Gap isn't perfect because I have to get the photos onto the external hard drive (ie connect it to a network somewhere) and at regular intervals the archive must be updated, again I do this for convenience by creating a new copy of the archive and updating that. This is the Generational approach. The new copy is the SON and this become the new air gapped Archive. The old copy is the FATHER and can be put away till next cycle when It is rewritten as the new SON. In the old TAPE backup days this was often taken to a third GRANDFATHER generation. At present I only have enough spare hard disks to do two generations and I only plan to cycle them over every three months.
I plan to use small memory sticks (only used for that purpose) to extract files if necessary between generation updates and this in theory reduced the likelihood of large scale malware, and particularly ransom-wear but does not avoid it altogether (eg stuxnet). The fact than I'm also crossing operating systems significantly reduces the possibilities of viruses being transmitted.
The Linux computer and the hard drive containing the Primary Archive are turned off and stored together in my studio rather than my office where the on-line collection of my photos is stored. Hopefully I will only need them every 3 months or so as I cycle and then update my primary archive.
No comments:
Post a Comment