Remembrance of data passed: A study of disk sanitization practices

IEEE Security and Privacy

Volumn 1, Issue 1, 2003, Pages 17-27

  Garfinkel, Simson L ^a,b   Shelat, Abhi ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b MIT's Lab for Computer Science   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DEMOGRAPHIC INFORMATION; DISK SANITIZATION PRACTICES; SECURE SOCKET LAYERS (SSL);

AUTOMATIC TELLER MACHINES; COSTS; CRYPTOGRAPHY; DATABASE SYSTEMS; DOS; ELECTRONIC MAIL; FINANCE; HARD DISK STORAGE; HTTP;

SECURITY OF DATA;

EID: 3042825662     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSECP.2003.1176992     Document Type: Article

References (18)

1. Network Associates, PGP Windows 95, 98 and NT User's Guide, Version 6.0. 1998; version 6.02 includes the pgpdisk encrypted file system and is available for download at www.pgpi.org/products/pgpdisk.
2. M. Blaze, "A Cryptographic File System for Unix," 1st ACM Conf. Comm. and Computing Security, ACM Press, New York, 1993, pp. 9-16.
3. Microsoft, "Encrypting File System for Windows 2000," www.microsoft.com/windows2000/techinfo/howitworks/security/encrypt.asp.
4. J. Hasson, "V.A. Toughens Security after PC Disposal Blunders," Federal Computer Week, 26 Aug. 2002; www.fcw.com/fcw/articles/2002/0826/news- va-08-26-02.asp.
5. M. Villano, "Hard-Drive Magic: Making Data Disappear Forever," New York Times, 2 May 2002.
6. J. Lyman, "Troubled Dot-Corns May Expose Confidential Client Data," NewsFactor Network, 8 Aug. 2001; www.newsfactor.com/perl/story/ 12612.html.
7. J. Markoff, "Patient Files Turn Up in Used Computer," New York Times, 4 Apr. 1997.
8. S. Berinato, "Good Stuff Cheap," CIO, 15 Oct. 2002, pp. 53-59.
9. National Computer Security Center, "A Guide to Understanding Dataremanence in Automated Information Systems," Library No. 5-236,082, 1991, NCSC-TG-025; www.radium.ncsc.mil/tpep/library/rainbow/NCSC-TG-028.ps.
10. California v. Greenwood, 486 US 35, 16 May 1988.
11. Microsoft, "Microsoft Extensible Firmware Initiative FAT32 File System Specification," 6 Dec. 2000; www.microsoft.com/hwdev/download/ hardware/fatgen103.pdf.
12. US Department of Defense, "Cleaning and Sanitization Matrix," DOS 5220.22-M, Washington, D.C., 1995; www.dss.mil/isec/nispom_0195.htm.
13. P. Gutmann, "Secure Deletion ofData from Magnetic and Solid-State Memory," Proc. Sixth Usenix Security Symp., Usenix Assoc., 1996; www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html.
14. T. Vier, "Wipe 2.1.0," 14 Aug. 2002; http://sourceforge.net/ projects/wipe.
15. D. Millar, "Clean Out Old Computers Before Selling/Donating," June 1997; www.upenn.edu/computing/security/advisories/oldcomputers.html.
16. National Institute of Standards and Technology, "National Software Reference Library Reference Data Set"; www.nsrl.nist.gov.
17. D.K. Gifford et al., "Semantic File Systems," Proc. 13th ACM Symp. on Operating Systems Principles, ACM Press, 1991, pp. 16-25.
18. G. Di Crescenzo et al., "How to Forget a Secret," Symposium Theoretical Aspects in Computer Science (STACS 99), Lecture Notes in Computer Science, Springer-Verlag, Berlin, 1999, pp. 500-509.