Data erasure

Data erasure (also called data clearing or data wiping) is a software-based method of overwriting the data that aims to completely destroy all electronic data residing on a hard disk drive or other digital media. Permanent data erasure goes beyond basic file deletion commands, which only remove direct pointers to the data disk sectors and make the data recovery possible with common software tools. Unlike degaussing and physical destruction, which render the storage media unusable, data erasure removes all information while leaving the disk operable, preserving IT assets and the environment. New flash memory–based media implementations, such as solid-state drives or USB flash drives can cause data erasure techniques to fail allowing remnant data to be recoverable.[1]

Software-based overwriting uses a software application to write a stream of zeros, ones or meaningless pseudorandom data onto all sectors of a hard disk drive. There are key differentiators between data erasure and other overwriting methods, which can leave data intact and raise the risk of data breach, identity theft or failure to achieve regulatory compliance. Many data eradication programs also provide multiple overwrites so that they support recognized government and industry standards, though a single-pass overwrite is widely considered to be sufficient for modern hard disk drives. Good software should provide verification of data removal, which is necessary for meeting certain standards.

To protect the data on lost or stolen media, some data erasure applications remotely destroy the data if the password is incorrectly entered. Data erasure tools can also target specific data on a disk for routine erasure, providing a hacking protection method that is less time-consuming than software encryption. Hardware/firmware encryption built into the drive itself or integrated controllers is a popular solution with no degradation in performance at all.

Presently, dedicated hardware/firmware encryption solutions can perform a 256-bit full AES encryption faster than the drive electronics can write the data. Drives with this capability are known as self-encrypting drives (SEDs); they are present on most modern enterprise-level laptops and are increasingly used in the enterprise to protect the data. Changing the encryption key renders inaccessible all data stored on a SED, which is an easy and very fast method for achieving a 100% data erasure. Theft of an SED results in a physical asset loss, but the stored data is inaccessible without the decryption key that is not stored on a SED, assuming there are no effective attacks against AES or its implementation in the drive hardware.

Importance

Information technology (IT) assets commonly hold large volumes of confidential data. Social security numbers, credit card numbers, bank details, medical history and classified information are often stored on computer hard drives or servers. These can inadvertently or intentionally make their way onto other media such as printer, USB, flash, Zip, Jaz, and REV drives.

Data breach

Increased storage of sensitive data, combined with rapid technological change and the shorter lifespan of IT assets, has driven the need for permanent data erasure of electronic devices as they are retired or refurbished. Also, compromised networks and laptop theft and loss, as well as that of other portable media, are increasingly common sources of data breaches.

If data erasure does not occur when a disk is retired or lost, an organization or user faces a possibility that the data will be stolen and compromised, leading to identity theft, loss of corporate reputation, threats to regulatory compliance and financial impacts. Companies have spent nearly $5 million on average to recover when corporate data were lost or stolen.[2] High profile incidents of data theft include:

Regulatory compliance

Strict industry standards and government regulations are in place that force organizations to mitigate the risk of unauthorized exposure of confidential corporate and government data. Regulations in the United States include HIPAA (Health Insurance Portability and Accountability Act); FACTA (The Fair and Accurate Credit Transactions Act of 2003); GLB (Gramm-Leach Bliley); Sarbanes-Oxley Act (SOx); and Payment Card Industry Data Security Standards (PCI DSS) and the Data Protection Act in the United Kingdom. Failure to comply can result in fines and damage to company reputation, as well as civil and criminal liability.

Preserving assets and the environment

Data erasure offers an alternative to physical destruction and degaussing for secure removal of all the disk data. Physical destruction and degaussing destroy the digital media, requiring disposal and contributing to electronic waste while negatively impacting the carbon footprint of individuals and companies.[9] Hard drives are nearly 100% recyclable and can be collected at no charge from a variety of hard drive recyclers after they have been sanitized.

Limitations

Data erasure may not work completely on flash based media, such as Solid State Drives and USB Flash Drives, as these devices can store remnant data which is inaccessible to the erasure technique, and data can be retrieved from the individual flash memory chips inside the device.[1] Data erasure through overwriting only works on hard drives that are functioning and writing to all sectors. Bad sectors cannot usually be overwritten, but may contain recoverable information. Bad sectors, however, may be invisible to the host system and thus to the erasing software. Disk encryption before use prevents this problem. Software-driven data erasure could also be compromised by malicious code.[10]

Differentiators

Software-based data erasure uses a special application to write a combination of ones and zeroes onto each hard disk drive sector. The level of security depends on the number of times the entire drive is written over.

Full disk overwriting

While there are many overwriting programs, only those capable of complete data erasure offer full security by destroying the data on all areas of a hard drive. Disk overwriting programs that cannot access the entire hard drive, including hidden/locked areas like the host protected area (HPA), device configuration overlay (DCO), and remapped sectors, perform an incomplete erasure, leaving some of the data intact. By accessing the entire hard drive, data erasure eliminates the risk of data remanence.

Data erasure can also bypass the BIOS and OS. Overwriting programs that operate through the BIOS and OS will not always perform a complete erasure due to altered or corrupted BIOS data and may report back a complete and successful erasure even if they do not access the entire hard disk, leaving the data accessible.

Hardware support

Data erasure can be deployed over a network to target multiple PCs rather than having to erase each one sequentially. In contrast with DOS-based overwriting programs that may not detect all network hardware, Linux-based data erasure software supports high-end server and storage area network (SAN) environments with hardware support for Serial ATA, Serial Attached SCSI (SAS) and Fibre Channel disks and remapped sectors. It operates directly with sector sizes such as 520, 524, and 528, removing the need to first reformat back to 512 sector size.

Standards

Many government and industry standards exist for software-based overwriting that removes the data. A key factor in meeting these standards is the number of times the data are overwritten. Also, some standards require a method to verify that all the data have been removed from the entire hard drive and to view the overwrite pattern. Complete data erasure should account for hidden areas, typically DCO, HPA and remapped sectors.

The 1995 edition of the National Industrial Security Program Operating Manual (DoD 5220.22-M) permitted the use of overwriting techniques to sanitize some types of media by writing all addressable locations with a character, its complement, and then a random character. This provision was removed in a 2001 change to the manual and was never permitted for Top Secret media, but it is still listed as a technique by many providers of the data erasure software.[11]

Data erasure software should provide the user with a validation certificate indicating that the overwriting procedure was completed properly. Data erasure software should also comply with requirements to erase hidden areas, provide a defects log list and list bad sectors that could not be overwritten.

Overwriting Standard Date Overwriting Rounds Pattern Notes
U.S. Navy Staff Office Publication NAVSO P-5239-26[12] 1993 3 A character, its complement, random Verification is mandatory
U.S. Air Force System Security Instruction 5020[13] 1996 4 All zeros, all ones, any character Verification is mandatory
Peter Gutmann's Algorithm 1996 1 to 35 Various, including all of the other listed methods Originally intended for MFM and RLL disks, which are now obsolete
Bruce Schneier's Algorithm[14] 1996 7 All ones, all zeros, pseudo-random sequence five times
U.S. DoD Unclassified Computer Hard Drive Disposition[15] 2001 3 A character, its complement, another pattern
German Federal Office for Information Security[16] 2004 2-3 Non-uniform pattern, its complement
Communications Security Establishment Canada ITSG-06[17] 2006 3 All ones or zeros, its complement, a pseudo-random pattern For unclassified media
NIST SP-800-88[18] 2006 1 ?
U.S. National Industrial Security Program Operating Manual (DoD 5220.22-M)[11] 2006 ? ? No longer specifies any method.
NSA/CSS Storage Device Declassification Manual (SDDM)[19] 2007 0 ? Degauss or destroy only
Australian Government ICT Security Manual 2014 - Controls[20] 2014 1 Random pattern (only for disks bigger than 15 GB) Degauss magnetic media or destroy Top Secret media
New Zealand Government Communications Security Bureau NZSIT 402[21] 2008 1 ? For data up to Confidential
British HMG Infosec Standard 5, Baseline Standard[22] ? 1 Random Pattern Verification is mandatory
British HMG Infosec Standard 5, Enhanced Standard ? 3 All ones, all zeros, random Verification is mandatory

Data can sometimes be recovered from a broken hard drive. However, if the platters on a hard drive are damaged, such as by drilling a hole through the drive (and the platters inside), then the data can only theoretically be recovered by bit-by-bit analysis of each platter with advanced forensic technology.

Number of overwrites needed

Data on floppy disks can sometimes be recovered by forensic analysis even after the disks have been overwritten once with zeros (or random zeros and ones).[23] This is not the case with modern hard drives:

E-waste and information security

The e-waste centre of Agbogbloshie, Ghana. Multimillion-dollar agreements from United States security institutions such as the Defense Intelligence Agency (DIA), the Transportation Security Administration and Homeland Security have all resurfaced in Agbogbloshie.[27][28]

E-waste presents a potential security threat to individuals and exporting countries. Hard drives that are not properly erased before the computer is disposed of can be reopened, exposing sensitive information. Credit card numbers, private financial data, account information and records of online transactions can be accessed by most willing individuals. Organized criminals in Ghana commonly search the drives for information to use in local scams.[27]

Government contracts have been discovered on hard drives found in Agbogbloshie, the unregulated e-waste centre in Ghana. Multimillion-dollar agreements from United States security institutions such as the Defense Intelligence Agency (DIA), the Transportation Security Administration and Homeland Security have all resurfaced in Agbogbloshie.[27][28]

See also

References

  1. 1 2 Michael Wei; Laura M. Grupp; Frederick E. Spada; Steven Swanson. "Reliably Erasing Data From Flash-Based Solid State Drives" (PDF). FAST '11: 9th USENIX Conference on File and Storage Technologies. Retrieved 31 October 2013. For sanitizing entire disks, built-in sanitize commands are effective when implemented correctly, and software techniques work most, but not all, of the time. We found that none of the available software techniques for sanitizing individual files were effective.
  2. ↑ Fontana, John (2006-11-02). "Average data breach costs companies $5 million". Network World. Retrieved 2010-07-20.
  3. ↑ Evers, Joris (2005-06-19). "Credit card breach exposes 40 million accounts". ZDNET. CNET News. Retrieved 2010-07-20.
  4. ↑ Powers, Mary (2008-02-13). "Laptops missing with IDs of donors". Memphis Commercial Appeal. Retrieved 2010-07-20.
  5. ↑ Sharp, David (2008-03-17). "Breach exposes 4.2 million credit, debit cards.". MSNBC.com. Associated Press. Retrieved 2010-07-20.
  6. ↑ Vijayan, Jaikumar (2008-03-21). "Programmer who stole drive containing 1 million bank records gets 42 months". Computer World. Retrieved 2010-07-20.
  7. ↑ "UF warns patients of security breach". Jacksonville Business Journal. 2008-05-20. Retrieved 2010-07-20.
  8. ↑ "OKC buyer finds sensitive information on server". Tulsa World. Associated Press. 2008-05-21. Retrieved 2010-07-20.
  9. ↑ "Is America exporting a huge environmental problem?". 20/20. ABC News. 2006-01-06. Retrieved 2010-07-20.
  10. ↑ "NSA/CSS Storage Device Declassification Manual" (PDF). NSA. This Manual 912 supersedes NSA/CSS Manual 1302, dated 10 November 2000.
  11. 1 2 "U.S. National Industrial Security Program Operating Manual (DoD 5220.22-M)". dtic.mil. United States Department of Defense National Industrial Security Program. 2006. Archived from the original (PDF) on 2008-08-22.
  12. ↑ "Navy Remanence Regulation, U.S. Navy Publication NAVSO P-5239-26". Fas.org. U.S. Navy Staff Office. 2008-05-30. Retrieved 2010-07-20.
  13. ↑ "Air Force System Security Instruction 5020 - Remanence Security". JYA.com. 1996. Retrieved 2010-07-20.
  14. ↑ Schneier, Bruce (1996). Applied Cryptography. New York: Wiley. p. 229. ISBN 0-471-12845-7.
  15. ↑ "Unclassified Computer Hard Drive Disposition" (PDF). U.S. DoD. 2001. Retrieved 2010-07-20.
  16. ↑ . German Federal Office for Information Security, 2004. Archived 26 June 2008 at the Wayback Machine.
  17. ↑ "Clearing and Declassifying Electronic Data Storage Devices ITSG-06" (PDF). Communications Security Establishment Canada. July 2006.
  18. 1 2 Kissel, Scholl, Skolochenko, Li (September 2006). "SP800-88 Guidelines for Media Sanitization" (PDF). Computer Security Division, Information Technology Laboratory. NIST. Retrieved 2010-07-20.
  19. ↑ "Storage Device Declassification Manual" (PDF). NSA.
  20. ↑ "Australian Government Information Security Manual (ISM)". Australian Signals Directorate. 2014. Retrieved 2014-12-09.
  21. ↑ "New Zealand Security of Information NZSIT 402". Government Communications Security Bureau. 2008. Retrieved 2010-07-20.
  22. ↑ "How to Choose a Secure Data Destruction Method" (PDF). Retrieved 6 January 2016.
  23. ↑ Gutmann, Peter (1996). "Secure Deletion of Data from Magnetic and Solid-State Memory". Department of Computer Science, University of Auckland. Retrieved 2010-07-20.
  24. ↑ Hughes & Coughlin (2007). "Tutorial on Disk Drive Data Sanitization" (PDF). Center for Magnetic Recording Research. Retrieved 2008-06-10.
  25. ↑ http://cmrr.ucsd.edu/people/Hughes/documents/QandAforwebsite10212008_000.doc
  26. ↑ Craig Wright; Kleiman, Dave; Sundhar R.S., Shyaam (December 2008). R. Sekar, R.; Pujari, Arun K., ed. "Information Systems Security". Information Systems Security: 4th International Conference, ICISS 2008. Lecture Notes in Computer Science (Springer-Verlag) 5352: 243–57. doi:10.1007/978-3-540-89862-7_21. ISBN 978-3-540-89861-0. |chapter= ignored (help) (Preview at Google Books).
  27. 1 2 3 "Africa’s Agbogbloshie Market Is a Computer Graveyard" NewsBreakingOnline.com. Web. 20 Feb. 2011.
  28. 1 2 Doctorow, Cory. "Illegal E-waste Dumped in Ghana Includes Unencrypted Hard Drives Full of US Security Secrets." Boing Boing. 25 June 2009. Web. 15 Mar. 2011.
This article is issued from Wikipedia - version of the Wednesday, April 27, 2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.