A hardware or software mechanism that only permits data to move in one direction and does not allow the flow of data in the opposite direction.
Source(s):
CNSSI 4009-2015
[Superseded]