RE: DoD aproved disk wiping tool

I'm not sure if this has been covered yet but NIST has overthrown the multiple-wipe technique on newer drives.

From http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800-88_rev1.pdf:

"Studies have shown that most of today's media can be effectively cleared by one overwrite."

(Clearing and purging have merged as terms in ATA disks manufactured after 2001 over 15 GB). Now if DoD is ignoring or superseding NIST then so be it but I thought I'd throw that out for those people that may want to follow Fed guidelines but want to save themselves time wiping a 200+ GB drive 3 times. :)


Samuel Mason, CISSP
-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx] On Behalf Of Timmothy Lester
Sent: Thursday, March 27, 2008 11:35 AM
To: ragdelaed@xxxxxxxxx; security-basics@xxxxxxxxxxxxxxxxx
Subject: RE: DoD aproved disk wiping tool

I believe killdisk's free version only supports 1-pass, you have to pay
for DoD wipes

I forgot to mention a good utility called Eraser, which now includes
DBAN. Eraser can be installed over the network and scheduled to erase
unused disk-space, or files. It can use several different wiping
methods, including DoDs. It's a must have...

-----Original Message-----
From: listbounce@xxxxxxxxxxxxxxxxx [mailto:listbounce@xxxxxxxxxxxxxxxxx]
On Behalf Of ragdelaed@xxxxxxxxx
Sent: Thursday, March 27, 2008 10:57 AM
To: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: DoD aproved disk wiping tool

These support DOD 5220.22-M guidelines and are free. They may support
5200.28, not 100%. The non software based method is degaussing.

KillDisk
http://www.killdisk.com/downloadfree.htm

Secure Erase. This is the purge approved method that seems to be the
most efficient method. It works on SATA/ATA drives for the most part, no
SCSI. Very fast. Free too.
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml

I dont know of any network based tools that can wipe a drive. You might
be able to mount the remote drive with linux and the dd it, but that
would not be approved. I think dd local would meet requirements, but not
network based.

The hard part is that you have to deploy something to the remote target
to keep the deletion going after the deletion has removed the functional
parts of the drive and dropped it from the network. In order to verify
this, I dont know if anyone would approve of a network based solution.

Its best to pull it and wipe it locally.

Relevant Pages

  • Re: Terminal Server Performance
    ... when we are having problems and it seems the network is fine during the ... I will have to analyze the data when the server starts going slow again. ... "Jeff Pitsch" wrote: ... the hard drives to see if commands are lining up during peak ...
    (microsoft.public.windows.terminal_services)
  • Re: Report this spam to: groups-abuse@google.com
    ... Google groups is simply a node on the usenet network, ... I almost forgot the two Metrodata computers I used at a CATV headend ... I repaired hundreds of Commodore computers them ... 1581 ROM from early Commodore disk drives. ...
    (sci.electronics.misc)
  • Re: Vista drive mapping to 2008 Server
    ... It sounds like something in the network infrastructure may not be working with some of these features. ... Try each setting both on the server alone, a client alone, then both. ... After doing this map a drive by any method then see if it loses the ... > No logon script used in this instance and it maps drives not used by> any ...
    (microsoft.public.windows.vista.networking_sharing)
  • RE: Going from Broadcoms sources to wireless card to WPA network
    ... wired connection to the internet; I indicate how I got this ... >> detect the network even via the ethernet cable! ... making my life in Windows bearable by using things like MinGW, ... The first should show all drives (actually partitions on ...
    (Fedora)
  • Re: Pc is slow outside the office????
    ... DNS network and my home peer-to-peer network. ... drives in each network. ... School records on server ... I also have a disconnect the home network drives similar to ...
    (microsoft.public.windowsxp.general)