Secure Deletion Research Articles

ErasuCrypto: A Light-weight Secure Data Deletion Scheme for Solid State Drives

Abstract Securely deleting invalid data from secondary storage is critical to protect users’ data privacy against unauthorized accesses. However, secure deletion is very costly for solid state drives (SSDs), which unlike hard disks do not support in-place update. When applied to SSDs, both erasure-based and cryptography-based secure deletion methods inevitably incur large amount of valid data migrations and/or block erasures, which not only introduce extra latency and energy consumption, but also harm SSD lifetime. This paper proposes ErasuCrypto, a light-weight secure deletion framework with low block erasure and data migration overhead. ErasuCrypto integrates both erasurebased and encryption-based data deletion methods and flexibly selects the more cost-effective one to securely delete invalid data. We formulate a deletion cost minimization problem and give a greedy heuristic as the starting point. We further show that the problem can be reduced to a maximum-edge biclique finding problem, which can be effectively solved with existing heuristics. Experiments on real-world benchmarks show that ErasuCrypto can reduce the secure deletion cost of erasurebased scheme by 71% and the cost of cryptographybased scheme by 37%, while guaranteeing 100% security by deleting all the invalid data.

Remote Wiping and Secure Deletion on Mobile Devices: A Review.

Mobile devices have become ubiquitous in almost every sector of both private and commercial endeavors. As a result of such widespread use in everyday life, many users knowingly and unknowingly save significant amounts of personal and/or commercial data on these mobile devices. Thus, loss of mobile devices through accident or theft can expose users-and their businesses-to significant personal and corporate cost. To mitigate this data leakage issue, remote wiping features have been introduced to modern mobile devices. Given the destructive nature of such a feature, however, it may be subject to criminal exploitation (e.g., a criminal exploiting one or more vulnerabilities to issue a remote wiping command to the victim's device). To obtain a better understanding of remote wiping, we survey the literature, focusing on existing approaches to secure flash storage deletion and provide a critical analysis and comparison of a variety of published research in this area. In support of our analysis, we further provide prototype experimental results for three Android devices, thus providing both a theoretical and applied focus to this article as well as providing directions for further research.

The Right to Be Forgotten: Exploring Consumer Privacy Attitudes About the Final Stage of the Information Life Cycle

Until now, privacy research has neglected the last stage of the information life cycle: deletion. Concern about secure deletion of information, however, is growing, particularly with regard to information posted in social networking sites. Stories about how such information can harm careers have led to discussion of a “right to be forgotten” (RTBF). We survey consumers to understand their attitudes about this proposed RTBF and find that it is distinct from previously validated first-order privacy constructs. We also find that digital natives and digital immigrants have different attitudes about the RTBF. Our results have important implications for both research and practice.

An encryption approach to secure modification and deletion for flash-based storage

Reliable erasing of data from storage devices is a critical component of secure data management and is well understood for magnetic disks. However, flash memory has unusual electronic limitations that make in-place updating impossible. Many secure deletion techniques have been proposed to improve both information security and erasing reliability. This paper investigates secure modification further. First, a formal definition of the levels of reliable erasing over flash-based systems is introduced. Then, an encryption strategy and key (ESK) security module are implemented. This module encrypts confidential files and forces all the generated keys and other relevant information of each file to be stored in the same blocks. Consequently, when securely modifying or deleting files, the ESK module erases as few blocks as possible. Experimental results show that the proposed module can improve the level of information safety and can reduce the number of page copies and block erases due to reliable erasing.

Secure Deletion of Data from SSD

The deletion of data from storage is an important component on data security. The deletion of entire disc or special files is well-known on hard drives, but this is quite different on SSDs, because they have a different architecture inside, and the main problem is if they serve the same methods like hard drives for data deletion or erasing. The built-in operations are used to do this on SSDs. The purpose of this review is to analyses some methods which are proposed to erase data form SSDs and their results too, to see which of them offers the best choice. In general we will see that the techniques of erasing data from entire disc from hard drives can be used also on SSDs, but there’s a problem with bugs. On the other hand, we cannot use the same techniques of erasing a file from hard drives and SSDs. To make this possible, there are required changes in FTL layer, which is responsible for mapping between logic addresses and physical addresses.

Secure Data Access from Android Smartphone without Internet

In recent year adoption of Android as a platform for mobiles has increased. To perform remote accessing of mobile contents there are many ways which make use of internet. This technique mainly deals with secure access of the textual contents of mobiles like contacts, SMS, Call log, location, as well as secure deletion of the same data from the android mobiles remotely using any mobile(need not be android phone) through SMS using different keywords for performing different actions and doesn’t need Internet for accessing of data.

스마트폰 메신저 어플리케이션에서의 개인정보보호에 관한 연구

세계적으로 스마트폰 이용자의 수가 증가하고, 다양한 종류의 스마트폰 어플리케이션들이 개발, 배포되고 있다. 특히, 소셜 네트워크 서비스(이하 SNS)가 가장 많이 개발, 배포되는 분야 중 하나이다. 다양한 형태의 SNS 중 커뮤니케이션 중심의 SNS의 경우 거의 모든 스마트폰 이용자들이 이용하고 있다. 스마트폰 메신저 어플리케이션은 커뮤니케이션 중심의 SNS를 이용하기 위한 어플리케이션이다. 이 어플리케이션은 서비스 탈퇴, 기기변경 등과 같은 회원관리 기능을 제공한다. 서비스 이용자가 회원 관리 기능을 사용할 경우 기존의 이용자 데이터는 완전히 삭제되어야 한다. 이러한 완전 삭제 기능이 정상적으로 동작하지 않을 경우 이용자의 정보가 유출될 수 있다. 이용자의 정보가 유출될 경우 피싱과 같은 피해를 당할 수 있어 문제가 된다. 특히, 스마트폰 메신저 어플리케이션의 경우 대화 내용과 같은 프라이버시를 침해당할 수 있는 정보까지 포함되어 있어 유출시 문제는 더 심각하다. 본 논문에서는 대표적인 스마트폰 메신저 어플리케이션이 제공하는 회원관리 기능의 개인정보보호법 부합여부를 분석하고, 이용자의 개인정보 및 프라이버시를 보호하는 방법에 대해 법적, 기술적 조치에 대한 해결책을 제시한다. The recent increase in smartphone usage has ignited the development of new applications which have changed the way of living in this internet era in the world. Almost all users which have smartphone have used many kinds of applications for lots of part. Especially, Social Network Service is the most popular part for smartphone users. The greater part of smartphone users take messenger service for smartphone. This kinds of applications provide to manage as deactivation of user or change of device. When users take to manage their information, their information would be deleted securely. If secure deletion didn't work correctly and released, their personal information can be easily abused to by others through various means such as internet phishing. In this paper, we analysis that the messenger application's management function keeps on the Personal Information Protection Act and suggest to prevent legally and technically for user's personal information and privacy.

Secure Data Deletion for USB Flash Memory

People commonly use USB flash memory because of its convenience and portability. It stores various data such as documents, pictures, certificates, and private data (e.g., passwords, account numbers). These data, especially private data, should not be revealed to the outside. However, even when the stored data is deleted, these data can be recovered using data recovery programs. To prevent this problem, various techniques have been proposed. In this paper, we review previous methods and analyze the security of these methods. We then propose a secure deletion method that requires only one write or erase operation. Our benchmark study shows the proposed method satisfies government agencies’ requirements for the secure deletion and performs better than the previous methods. The main contribution of this paper is two-fold: (1) we show our method satisfies the government's recommendations for secure data deletion and (2) our proposed method has better performance than previously proposed method because only one write or write-then-erase operation is performed.

Models and Design of an Adaptive Hybrid Scheme for Secure Deletion of Data in Consumer Electronics

As more mobile storage devices are used in consumer electronics, possibility of user confidential data leakage increases. To make things worse, data of deleted file in mobile storage such as USB drives can be easily recovered and, thus, can be vulnerable to data leakage. To prevent this type of data leakage, efficient secure deletion techniques are required and we present two secure deletion techniques, namely block cleaning and zero overwriting, for flash memory storage. Also, we propose cost and benefit models of both techniques. The models imply an existence of an efficient adaptive hybrid secure deletion scheme that applies one of the techniques based on their costs and benefits at given data arrangements. Experimental results measured on an embedded board show that the adaptive hybrid scheme deletes data securely and efficiently for various data patterns on flash memory storage.