A hardware or software mechanism that only permits data to move in one direction and does not allow the flow of data in the opposite direction.
Sources:
CNSSI 4009-2015