Secure Deletion Research Articles

Optimizing Secure Deletion in Interlaced Magnetic Recording With Move-on-Cover Approach

Optimizing Secure Deletion in Interlaced Magnetic Recording With Move-on-Cover Approach

IoT security: On-chip secure deletion scheme using ECC modulation in IoT appliances

NAND flash memory-based IoT devices inherently suffer from data retention issues. In IoT security, these retention issues are significant and require a robust solution for secure deletion. Secure deletion methods can be categorized into off-chip and on-chip schemes. Off-chip secure deletion schemes, based on block-level erasure operations, are unable to perform real-time trim operations. Consequently, they are vulnerable to hacking threats. On the other hand, on-chip secure deletion schemes enable real-time trim operations by performing deletion on a page-by-page basis. However, the on-chip scheme introduces a challenge of program disturbance for neighboring page data. The proposed on-chip deletion scheme tackles this problem by utilizing ECC code modulation through a partial program operation. This approach significantly reduces the program disturbance issue associated with neighboring page data. Moreover, the proposed code modulation secure deletion scheme allows for real-time verification of the deletion of original data.

Leveraging Journaling File System for Prompt Secure Deletion on Interlaced Recording Drives

With the growing awareness of secure computation, more and more users want to make their digital footprints securely deleted and irrecoverable after updating or removing files on storage devices. To achieve the effect of secure deletion, overwritten-based secure deletion techniques have been proposed to overwrite invalidated storage space with scrambled data content. Nevertheless, overwritten-based secure deletion requires explicit write requests for rewriting invalidated storage space with random data, thus incurring additional internal write traffic on storage devices. Recently, this inefficient aspect of secure deletion is exacerbated by the emergence of high-density interlaced magnetic recording (IMR) technology. IMR technology enhances the storage density of hard disk drives by interlacing narrower top tracks on wider bottom tracks. Owing to the interlaced track layout, securely erasing invalidated data on bottom tracks interferes with adjacent top tracks and track rewrites are required to preserve valid data on top tracks; thus, overwritten-based secure deletion on IMR drives significantly enlarges the internal write traffic and impairs the secure deletion efficiency. In this paper, instead of directly alleviating the constraint induced by the interlaced track layout, we propose leveraging the interlaced track layout of IMR drives in combination with the journaling data stream of journaling file systems to enable prompt secure data deletion while minimizing the write traffic of secure deletion operations. Experimental results suggest that the performance improvement achieve by the proposed prompt secure deletion (P-SD) strategy is 51.84% on average, when compared with the previous TrackLace approach on IMR drives.

A Review of Assured Data Deletion Security Techniques in Cloud Storage

Cloud computing is an interesting technology that allows customers to have convenient, on-demand network connectivity based on their needs with minimal maintenance and contact between cloud providers. The issue of security has arisen as a serious concern, particularly in the case of cloud computing, where data is stored and accessible via the Internet from a third-party storage system. It is critical to ensure that data is only accessible to the appropriate individuals and that it is not stored in third-party locations. Because third-party services frequently make backup copies of uploaded data for security reasons, removing the data the owner submits does not guarantee the removal of the data from the cloud. Cloud data storage has grown in popularity, and the problem of ensured deletion has been solved. Several schemes to overcome the assured deletion problem have been proposed over the last few years. The proposed solutions have addressed the scaling overhead, trusted third parties, delays, single points of failure, and other inefficiencies. Customers had the option of receiving verifiable proof of deletion from cloud service providers. This article focuses on the issue of how cloud data storage clients may be confident that the deleted data from the cloud cannot be recovered. Furthermore, it discusses the practice of secure deletion. Moreover, the paper explores currently used methods to achieve the security of assuring the deletion of data faced by cloud entities such as cloud service providers, data owners, and cloud users. After that, the paper analyzes techniques to find the pros and cons of assured deletion and the problems that were solved by these techniques. Finally, the paper identifies some future directions for the development of assured deletion of cloud storage.

Improved secure dynamic bit standard technique for a private cloud platform to address security challenges

The numerous technologies and procedures used to safeguard private cloud infrastructure are private cloud security. Despite multitenant public cloud environments, resources are dedicated to individual companies in a private cloud. Cloud computing uses several data security mechanisms, including authentication and identification, access control, encryption, secure deletion, integrity checking, and data masking. Cloud computing relies heavily on security and traffic management. Because data must be transferred from a local computer to a remote computer when using a cloud computing service, data protection is becoming an increasingly important security problem. Research on cloud computing-based secure dynamic bit standard (CC-SDBS) technology has increased data security. This technique’s cryptographic algorithms (CA) improve cloud computing security. As a result of the private cloud security level algorithm (PCSLA), the client’s private data can be easily accessed in the cloud. For the client’s private cloud data, PCSLA provides dynamic security measures. Cloud computing applications can use the tests’ better data security in the future. The proposed algorithm’s testing results have shown a noticeable improvement in cipher size and execution time compared with other commonly used cloud computing. Numerical results revealed that CC-SDBS improved average energy consumption by 20%, average network latency by 25%, average key generation time analysis by 4.3%, and average network use by 15%.

NASA: NVM-Assisted Secure Deletion for Flash Memory

Secure deletion in flash-based storage is crucial for data security. However, existing secure deletion schemes for flash memory suffer from performance degradation and reliability issues and cannot provide secure deletion guarantees. Although emerging nonvolatile memory (NVM) allows in-place updates and provides high performance, it is unable to fully replace flash memory and, thus, cannot solve the secure deletion problem. In this article, we propose NVM-assisted secure deletion scheme for flash memory (NASA), a stale-free storage system that combines NVM and flash memory to provide immediate secure deletion without significant performance degradation in SSDs. NASA uses block erasure to provide secure deletion guarantees for flash memory and exploits NVM to conceal time-consuming erasure operations. We demonstrate that unless the unique characteristics of NVM are considered, schemes that merely implement existing approaches to secure deletion will end up with stale data replicas within their storage media. Moreover, we evaluate NASA with different real-world workloads and demonstrate that NASA increases the average latency by 0.01% compared to LRU and decreases 2.1% average latency over the FIFO caching policy. NASA is a novel storage system that provides strong secure deletion guarantees with high performance.

ANALYSIS OF ANTI COMPUTER FORENSICS TECHNIQUE USING OVERWRITING METADATA METHOD ON DIGITAL EVIDENCE

<p><em>The development of technology during this globalization period is very fast and rapid, especially during the pandemic in this world which makes all activities like education, work etc. carried out online-based. Because, with the increase in the use of online-based media, a problem arises like crimes that use online or digital media as an intermediary known as cybercrime. With this cybercrime, a science that can be used in securing personal data is needed, namely anti-computer forensic science. This research is focused on the analysis and implementation of forensic anti-computer science in securing personal files. In this study, the anti-computer forensic method that will be analyzed and applied is metadata overwriting, data destruction, and data hiding.In this test, the three methods will be broken down again into several sub methods or techniques such as file obscure manipulation, file timestamp manipulation, secure deletion, and data encryption. The results of the application of several categories of techniques will be written and then analyzed.The results of the study showed that the technique tested was very good and safe in securing personal files so that they could not be detected by systems or digital forensic software but there were still weaknesses, namely in the data hiding section if the password or key used was simple, it would be easy to hack.</em></p>

A File-Oriented Fast Secure Deletion Strategy for Shingled Magnetic Recording Drives

Nowadays, securely erasing deleted files has become one of the necessary tasks for users who want to protect their deleted data from malicious attackers. Nevertheless, existing secure deletion approaches are considered inefficient for erasing deleted files permanently because the file systems and storage devices do not share their file information or data layout with each other. On the emerging shingled magnetic recording (SMR) drives, the inefficiency of existing secure deletion approaches is exaggerated by the inherent sequential-write constraint of the high storage density SMR technology. On SMR drives, tracks are overlapped via utilizing the size difference between disk read/write heads to increase the storage density. Due to the overlapped track layout, secure deletion requests may induce a significant amount of write amplification and serious performance degradation if the data layout is not properly configured. Such observation motivates this article to come up with a file-oriented fast secure deletion (FFSD) strategy to deal with the sequential-write constraint of SMR drives and improve the efficiency of secure deletion operations on SMR drives. The experimental results show that the proposed strategy can effectively reduce the secure deletion latency by <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$286.15\times $ </tex-math></inline-formula> on average when compared with the conventional approach.

Security of IoT Device: Perspective Forensic/Anti-Forensic Issues on Invalid Area of NAND Flash Memory

NAND flash memory-based IoT device can potentially still leave behind original personal data in an invalid area even if the data has been deleted. In this paper, we raise the forensic issue of original data remaining in unmanaged blocks caused by NAND flash memory and introduce methods for secure deletion of such data in the invalid area. We also propose a verification technique for secure deletion that is performed based on cell count information, which refers to the difference in bits between personal data and data stored in the block. The pass/fail of the verification technique according to the cell count information is determined in consideration of error correction capabilities. With the forensic issue of de-identification being a vital theme in the big data industry, the threat of serious privacy breaches coupled with our proposal to prevent these attacks will prove to be critical technological necessities in the future.

CP-ABE-Based Secure and Verifiable Data Deletion in Cloud

Cloud data, the ownership of which is separated from their administration, usually contain users’ private information, especially in the fifth-generation mobile communication (5G) environment, because of collecting data from various smart mobile devices inevitably containing personal information. If it is not securely deleted in time or the result of data deletion cannot be verified after their expiration, this will lead to serious issues, such as unauthorized access and data privacy disclosure. Therefore, this affects the security of cloud data and hinders the development of cloud computing services seriously. In this paper, we propose a novel secure data deletion and verification (SDVC) scheme based on CP-ABE to achieve fine-grained secure data deletion and deletion verification for cloud data. Based on the idea of access policy in CP-ABE, we construct an attribute association tree to implement fast revoking attribute and reencrypting key to achieve fine-grained control of secure key deletion. Furthermore, we build a rule transposition algorithm to generate random data blocks and combine the overwriting technology with the Merkle hash tree to implement secure ciphertext deletion and generate a validator, which is then used to verify the result of data deletion. We prove the security of the SDVC scheme under the standard model and verify the correctness and effectiveness of the SDVC scheme through theoretical analysis and ample simulation experiment results.

ADAPT: An auxiliary storage data path toolkit

The legacy storage data path is largely structured in black-box layers and has four major limitations: (1) functional redundancies across layers, (2) poor cross-layer coordination and data tracking, (3) presupposition of high-latency storage devices, and (4) poor support for new storage data models. While addressing all these limitations is a daunting challenge, we introduce ADAPT, an auxiliary storage data path toolkit that complements the legacy storage data path to help mitigate these limitations. This toolkit enables all storage layers to coordinate and track data using shared data structures constructed through the ADAPT API. Our case studies have shown that we can directly support applications such as a key-value store without going through the file system. We also built an ADAPT-based file system and prioritized caching to demonstrate the usability, extensibility, and robustness of ADAPT. In addition, we built per-file secure deletion via our ADAPT-based file system to demonstrate data-path-wide coordination and data tracking.

Secure data deletion in cloud storage: a survey

With the rapid development of cloud computing, individual people, firms, industries and governments are moving their data to clouds to meet the data explosion challenge. Secure data deletion is becoming a hot issue in cloud storage research. Different from traditional data deletion, the securely deleted data should be non-recoverable. In this paper, we present a survey of current secure data deletion technologies and make comparisons of them for both private cloud storage and public cloud storage. For private cloud storage, we introduce two main deletion methods: physical destruction and disk replication. For public cloud storage, we analyse the existing deletion methods such as balanced-tree-based, trusted-third-parties-based, policy-based secure data deletion methods and so on, in accordance with the two aspects of verifiable secure data deletion and verifiable non-recoverability of data. Finally, we analyse the deficiencies among current researches and propose some future directions for improvement in secure data deletion.

A secure data deletion scheme for IoT devices through key derivation encryption and data analysis

With the widespread adoption of mobile devices in various IoT services, an increasing amount of personal sensitive data are stored in IoT devices using flash memory as storage medium. Personal sensitive data are subject to privacy leakage due to unauthorized access, accidentally loss or resale of IoT devices. To tackle this challenge, in this paper, we present a novel key derivation encryption (KDE) algorithm, which is then used to construct a secure data deletion (SDDK) scheme for IoT devices. Initially, we design a nodal key tree based on flash memory’s hierarchical structure, and present a KDE algorithm to generate data key for encrypting user’s sensitive data and simplify key management. Meanwhile, based on KDE, we propose an SDDK scheme by combining partial block erasure with key deletion to remove both the ciphertext and the key components after data expiration, thereby implementing secure data deletion on IoT devices. Furthermore, we formally describe the process of SDDK using a mathematical analysis model, and give an optimal solution to reduce the page transfer overhead by employing implicit enumeration analysis algorithm. Finally, security analysis shows that the KDE algorithm is provably secure and the SDDK scheme implements data privacy protection and secure deletion of invalid data. Performance analysis and experimental results indicate that the SDDK scheme is effective and efficient.

Toward Data Security in Edge Intelligent IIoT

IIoT significantly improves industrial productivity and at the same time reduces manufacturing costs. In order to satisfy the requirements in IIoT applications, such as location awareness and low latency, edge intelligence has been proposed to enhance the capability of processing data at the edge of the network. As a typical example of edge intelligence, fog computing offers a lot of potential benefits including transient storage, decentralized computation, stronger security, and so on. In this article, we mainly focus on the data security in edge intelligent IIoT. We present four major challenges in data security of edge intelligent IIoT, including reliable storage, convenient usage, efficient search, and secure deletion, and provide the corresponding solutions to each challenge. Furthermore, we propose an optimized framework, which enjoys higher security and better integration to IIoT. The proposed framework promotes the underlying IIoT in data acquisition, processing, and transition, thus leading to stronger security and better efficiency. Finally, we implement the solutions on a desktop and Raspberry Pi, and demonstrate the experimental results.

Scrubbing-Aware Secure Deletion for 3-D NAND Flash

Due to the increasing security concerns, the conventional deletion operations in NAND flash memory can no longer afford the requirement of secure deletion. Although existing works exploit secure deletion and scrubbing operations to achieve the security requirement, they also result in performance and disturbance problems. The predicament becomes more severe as the growing of page numbers caused by the aggressive use of 3-D NAND flash-memory chips which stack flash cells into multiple layers in a chip. Different from existing works, this paper aims at exploring a scrubbing-aware secure deletion design so as to improve the efficiency of secure deletion by exploiting properties of disturbance. The proposed design could minimize secure deletion/scrubbing overheads by organizing sensitive data to create the scrubbing-friendly patterns, and further choose a proper operation by the proposed evaluation equations for each secure deletion command. The capability of our proposed design is evaluated by a series of experiments, for which we have very encouraging results. In a 128 Gbits 3-D NAND flash-memory device, the simulation results show that the proposed design could achieve 82% average response time reduction of each secure deletion command.

Ensuring data confidentiality via plausibly deniable encryption and secure deletion \u2013 a survey

Ensuring confidentiality of sensitive data is of paramount importance, since data leakage may not only endanger data owners’ privacy, but also ruin reputation of businesses as well as violate various regulations like HIPPA and Sarbanes-Oxley Act. To provide confidentiality guarantee, the data should be protected when they are preserved in the personal computing devices (i.e., confidentiality during their lifetime); and also, they should be rendered irrecoverable after they are removed from the devices (i.e., confidentiality after their lifetime). Encryption and secure deletion are used to ensure data confidentiality during and after their lifetime, respectively.This work aims to perform a thorough literature review on the techniques being used to protect confidentiality of the data in personal computing devices, including both encryption and secure deletion. Especially for encryption, we mainly focus on the novel plausibly deniable encryption (PDE), which can ensure data confidentiality against both a coercive (i.e., the attacker can coerce the data owner for the decryption key) and a non-coercive attacker.

SADUS: Secure data deletion in user space for mobile devices

Conventional data deletion is implemented for reclaiming storage as a rapid operation. However, the content of the deleted file still persists on the storage medium. Secure data deletion is a task of deleting data irrecoverably from the physical medium. Mobile devices use flash memory as the internal storage. However, flash memory does not support the in-place update which is in direct opposition to efforts to securely delete sensitive data from storage. Previously practical secure deletion tools and techniques are rapidly becoming obsolete, and are rendered ineffective. Therefore, research on secure data deletion approaches for mobile devices has become a practical and urgent issue.In this paper, we study the logic structure and operation characteristics of flash memory, and survey related work on secure data deletion. In addition, we define the adversary capability and threat model, putting forward the design goals that secure data deletion scheme needs to meet. Then an approach in user space that uses the user space file system to provide secure deletion guarantees at file granularity is proposed, independent of the characteristics of the underlying file system and storage medium. The approach encrypting every file on an insecure medium with a unique key that can later be discarded to cryptographically render the data irrecoverable. Moreover, we implement our secure data deletion approach on Android platform named SADUS. Finally, experiments are conducted, and the results indicate that SADUS prototype ensures the secure deletion of data in flash memory on mobile devices with comparable overhead and it can meet the requirements of the users in daily use.

Data Integrity Checking with Reliable Data Transfer for Secure Cloud Storage

Currently, an increasing number of data owners prefer to store their data on remote servers due to a number of appealing advantages of cloud storage, say convenience and simplicity, scalability of the service and ubiquitous network access. However, outsourced data's transfer becomes a critical requirement for cloud users because of the emergence of various cloud storage services with different qualities of services. Therefore, the users might not only be anxious about the status of their data on cloud servers but also care whether the data are transferred entirely to the new cloud without corruption and whether the data on original cloud are discarded. To address these challenging issues, in this paper, we propose a novel auditing scheme for cloud storage services characterised by secure data transfer, provable data erasure, high error detection probability, confidential data storage. The proposed scheme can guarantee the integrity of remote data when the data are hosted on cloud servers and are transferred between two clouds, and secure deletion of the transferred data on the original cloud.

Data deletion method for security improvement of Flash memories

For Flash memories, data remanence can cause differences in threshold voltage among the erased cells. By detecting such differences, already-erased data can be recovered. To decrease the differences, a secure deletion method of data is investigated in this paper. The effects of erase-erase (EE) operation and erase-program (EP) operation on threshold voltage are studied in theory. Based on the floating-gate device model, the optimal overwriting sequence, EPEPE, is obtained by simulation. This sequence can reduce the difference to 0.1 mV in threshold voltage among the erased Flash cells, which equals to that caused by one floating-gate electron.

A Risk Management Framework for Cloud Migration Decision Support

Keywords: risk management framework; risk assessment; cloud migration; security; analytic hierarchy process (AHP); business value