The following message is a courtesy copy of an article that has been posted to bit.listserv.ibm-main as well.
[EMAIL PROTECTED] (Anne & Lynn Wheeler) writes: > the issue normally reduces to what is the threat model? security > classification tends to be associated with threat model where divulging > the information is not desirable ... and classification level attempts > to make the measures to prevent information divulging proportional to > the damange that might happen if the information is divulged (and/or the > effort that an attacker will go to in order to get the data). For > magnetic media this might be something like overwritting a specific > number of times with (different) random data ... nist standard: > http://csrc.nist.gov/publications/nistpubs/800-88/NISTSP800-88_rev1.pdf re: http://www.garlic.com/~lynn/2008c.html#47 Data Erasure Products oh, and note recent article: 'Erased' personal data on agency tapes can be retrieved, company says http://www.govexec.com/dailyfed/0108/012308j2.htm from above: Personal and sensitive government data -- including employees' personal data -- on magnetic tapes that federal agencies erase and later sell can be retrieved using simple technology, according to an investigation conducted by a storage tape manufacturer. ... snip ... the above article references a GAO report/study: According to its September 2007 report (GAO-07-1233R), GAO concluded it could not find "any comprehensible data on any of the tapes using standard commercially available equipment and data recovery techniques, specialized diagnostic equipment, custom programming or forensic analysis." ... snip ... i.e. gao report http://www.gao.gov/new.items/d071233r.pdf old article from last sept: Government sale of used magnetic tape storage not a big security risk, GAO reports http://www.networkworld.com/community/node/19807 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
