A survey of security separation technology and products

This paper surveys the field of security separation technology from a network security perspective. The basic idea of security separation is to use physical or logical measures to protect computers with sensitive information from external or internal threats. The paper first discusses two basic concepts of security separation, i.e., end device separation and network separation. After that, it introduces four different techniques and products to implement the separation idea, and presents the primary characteristics of them. Finally, it makes a conclusion and provides some suggestions for future work.