CMRR磁盘存储安全协议.pdfVIP

CMRR Protocols for Disk Drive Secure Erase Users want and need a simple and secure way to erase all their data from disk drives, when releasing them from their physical control for resale or repair. Over a third of drives resold on eBay contain personal data such as credit and medical records.1 These drives come from PCs, servers, ATM machines, banks, and workstations. It is important to initially emphasize that erasure security can only be relative. There is no method giving absolutely secure erase. Government document DoD 522.22M is commonly quoted on erasure methods, and requires physical destruction of the storage medium (the magnetic disks) for data classified higher than Secret. However, even such physical destruction is not absolute if any remaining disk pieces are larger than a single 512-byte record block in size, about 1/125” today’s drives. Pieces of this size are found in bags of destroyed disk pieces studied at CMRR. Magnetic microscopy can image the stored recorded media bits, using the CMRR scanning magnetoresistive microscope. Physical destruction nevertheless offers the highest level of erasure because recovering any actual user data from a magnetic image requires overcoming almost a dozen independent recording technology hurdles. This is an example of “exotic time consuming technology” necessary as the barrier to data recovery for the highest level of erasure security. Even if these hurdles were overcome, about an hour would be required to recover one single user data block out of millions on the disk. Recovering substantial amounts of data in less than months requires that the disk be intact and undamaged so that heads can be flown over it to obtain data playback signals, and also overcoming the technology