Hello everyone:) Can anyone recommend me some publications on data destruction? I am looking for e.g. publications concerning: - the use of microwave radiation in the destruction of data or data carriers, - analyzes of thermal resistance of data carriers, Curie temperature for the magnetic layer of hard drives, resistance of NAND systems, - solutions used in the chemical destruction of data carriers, but also other methods of data destruction, both physical and software (e.g. overwriting).
Or maybe someone knows and uses some unusual or little-known data destruction methods?
Did you consult https://en.wikipedia.org/wiki/Data_erasure with a list of methods, links and references?
Wolfgang R. Dick Thank you for your response. I looked at Wikipedia. Note that this is a very general article. For example, it lists a number of standards for overwriting data, but does not address the differences between these standards in enough way. And they differ not only in the number of overwrite passes, but also in overwrite patterns. Can you tell which of these factors are really important in the data destruction process? What is the optimal number of overwrite passes? Everything indicates that once is enough, and each subsequent run is a waste of time and energy. Does the overwrite pattern used affect the effectiveness of the overwrite? Can you identify any other threats to the effectiveness of overwriting as a data destruction method?
Encryption is supposed to protect data from unauthorized access, and the most common methods of compromising encryption systems usually come down to discovering where the key is stored or how to force its unauthorized use. Dictionary attacks, rainbow tables or brute force are effective against relatively short and not always sufficiently complex passwords, but with a sufficient length of the encryption key, these methods are insufficient. Therefore, we can consider the destruction of the encryption key as safe, although mathematically there is still a chance of decrypting the data.
As for demagnetization - I am interested in the values of the magnetic field that guarantees demagnetization of the media without unnecessary redundancy. I know that the 0.9T inductive demagnetizers have undergone micromagnetic testing and the certification process for hard drives with perpendicular recording. The magnetic layer is based on cobalt, but contains impurities that are different in the perpendicular record and different in the longitudinal record. Recently, HAMR drives using FePt alloys have appeared. Similar alloys will be used in MAMR drives. They have much higher coercivity than Co-based alloys. On the other hand, iron oxides were commonly used long ago. The efficiency of demagnetization mainly depends on the magnetic properties of the data storage layer, but finding detailed information is difficult.
Similarly, it is difficult to find publications containing analyzes of the thermal resistance of data carriers. Typically, when using thermal methods of destroying data carriers, excess temperature is used in excess time. Optimizing the process would save energy without compromising performance. This may also be important for optimizing waste recycling. Here also, for example, the Curie point depends on the composition of the ferromagnetic alloy.
Other methods of data destruction are also used - such as chemical, for which I cannot find the relevant literature, or mechanical - where many popular methods of damaging media turn out to be ineffective in practice.
There are numerous publications on the analysis of recoverable statistics from used data carriers purchased on the secondary market. However, subsequent publications on this subject bring little. We are aware of the low level of awareness of the risks associated with incorrect and insufficient deletion of data, subsequent results are burdened with some randomness related to fluctuations in the currently available offer of used data carriers. It is much more important to determine how data can be effectively destroyed without unnecessary redundancy (and costs), such as in the case of a 35-pass overwrite, but also minimizing vulnerabilities and the risk of process failure.
At the same time, I do not want to rely on sales and marketing publications whose purpose is to encourage the customer to choose a specific company, software, device or method of data destruction. Such publications are not objective, they are often misleading, presenting a specific solution as the only effective one, often unjustifiably accusing alternative methods of ineffectiveness.
Also, the instructions and standards for handling data carriers raise my doubts, because they are often inconsistent with each other and give the impression that they are not based on reliable technical knowledge about the functioning of data carriers and the physics of storing logical states, but on the authors' subjective beliefs.
Rana Hamza Shakil
Thank you very much.Can you point out the optimal number of overwrite passes? Enough to guarantee 100% data destruction, but without unnecessary redundancy. Can you provide a technical justification for this number of passes or point to relevant publications? Different recommendations and standards require different numbers of passes, but do not indicate a technical justification. Are you able to point out the differences in overwrite efficiency depending on the overwrite patterns or data content used? How is secure wiping different from just overwriting? Data destruction services are not a data destruction method. It is simply hiring external entities to use the same methods of data destruction that could be used internally. I am mainly interested in technical aspects. Organizational aspects, compliance with standards and process certification are of secondary importance to me. I am interested in the existing procedures in terms of whether they are justified by technical knowledge about the functioning of data carriers and methods of data destruction, and not whether they themselves justify the use of specific methods. I find no justification for combining different methods of data destruction. If the selected method of data destruction is effective, combining it with another method is an unnecessary cost. If it is not effective - in itself it is an unnecessary cost. If we get 100% certainty of data destruction, can this effect be improved by using another destruction method? Does the effectiveness of data destruction in any way depend on the data? Don't you think that the assessment of data sensitivity/confidentiality is a subjective issue, even if legal regulations try to objectify this issue? It was for consulting with the experts that I asked the question here and thank you again for sharing your experience with me :)
Hello! Discovering data destruction technologies like microwave radiation, thermal analysis, chemical destruction, and software-based approaches is exciting. Recommended publications and resources cover these subjects. The following references should help you start your investigation, while niche-specific titles may be scarce:
1. Microwave Radiation in Data Destruction: - "Microwave-Assisted Destruction of Data Storage Devices" in "Journal of Microwave Power and Electromagnetic Energy." Microwaves can destroy electronic data storage devices.
2. Thermal Resistance of Data Carriers: - "Thermal Degradation of Electronic Components and Data Storage Devices" in "IEEE Transactions on Components, Packaging, and Manufacturing Technology." It measures thermal resistance and degradation of electronics, especially data storage devices.
3. Cure Temperature for Hard Drive Magnetic Layers: - "Materials Science of Data Storage" by Bhushan and Luo. Data storage magnetic materials are discussed in this book, including Curie temperatures and thermal stability.
4. Chemical Data Carriers Destruction: - "Chemical Methods for the Destruction of Electronic Data Carriers" in "Journal of Applied Chemistry." This article discusses chemical data carrier degradation methods.
5. Software-Based Data Destruction: "Secure Data Deletion" by Joel Reardon. This book extensively addresses software-based secure data destruction, including overwriting.
6. "Exploring Unconventional Data Destruction Techniques" in the "International Journal of Information Security." This paper may address novel data destruction methods.
The newest information security and data management conference proceedings or technical studies may provide more detailed information, especially on cutting-edge methods. University libraries, specialised databases, and cybersecurity organisations typically have these resources.
Data destruction is constantly evolving with technological advances, therefore staying up to speed on research and publications is essential to understanding existing and upcoming methods.
Mohit Tiwari Thank you for your answer, but could you provide more details? I cannot find most of the publications you indicated. Could you supplement your answer with the authors' names and journal numbers? Can you indicate the ISBN or publisher of "Materials Science of Data Storage"?
As for "Secure Data Deletion", do you feel that the title of this book is somewhat inappropriate for its content?