Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

Dawn of the Undead Data

 

Sign up to receive Security Resource Alerts

December 15, 2003 (Computerworld) -- In George Romero's classic 1968 horror film, Night of the Living Dead, the deceased rose from their graves to terrorize the living. Many IT organizations now find themselves in a similar nightmare as data they thought was dead and gone has risen from the storage crypt. When hackers, competitors or governments apply the right technologies, the data you thought you had destroyed, and which has stumbled outside the corporate gates on discarded PC hard disk drives, backup tapes and other zombie media, comes alive again. And opportunists are quick to use this data to extract their pound of flesh.
Take the case of the insurer that thought it had wiped the hard drives on retired PCs clean before disposing of them. Someone who bought one of those PCs and discovered sensitive data on it is blackmailing the company, says Bob Houghton, president of Redemtech Inc., a Hilliard, Ohio-based recycler of PCs and other IT products. And since the breach involved customer data, the company must disclose it to its customers under a California privacy law.
The IT staff may have simply overlooked erasing that PC in the disposal process. But the true horror is that in many cases, even wiped data on those 1,000 PCs you just sent out the door can be resuscitated.
And third-party vendors that claim to wipe PC disks before disposing of them don't always do the job right, either. One IT executive at a large financial services company outsourced the task to four different vendors. Now she's in litigation with three of them, according to Gartner analyst Frances O'Brien.
Redemtech says that on average, 25% of the systems it audits still have data on them even though IT thought the systems had been wiped clean. IT managers don't realize that their own best practices, if they have them, aren't being followed. And even when they are, the erasure process may simply transport the data to the land of the undead.
Consider the options. An fdisk breaks the partition but leaves data on the drive that any disk utility can read. A quick format only overwrites the system area of the disk. A low-level format overwrites most data in sectors accessible by the operating system but leaves many areas untouched. Consumer-grade disk-wiping tools supposedly overwrite every sector, but data recovery specialists say they often retrieve data that these tools have left behind.
Then there's degaussing -- applying a strong magnetic field to the disk to erase it.

Continued...
1 | 2 | NEXT  



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
Dawn of the Undead Data
"You see, this is why we love our Macs. I had a good chuckle when I read..." Read more...
"Dear me. Just because I recently talked about Windows XP SP3's virtues and vices, some people seem to think I've..." Read more...
Read more Security posts or See all Blogs
HP-EDS deal spurs range of customer reactions
FAQ: What does the HP-EDS deal really mean?
Microsoft fixes critical Windows, Word flaws
More top stories...
Review: Which 3G network is the best?
Restaurant chain served up payment card data to hackers
End appears to be near for Philly Wi-Fi network
A role on an IT help desk is what you make of it, tech pros say — just don't get too comfy.
Web-based e-mail may be exposing you to privacy and security dangers you didn't sign up for.
Ever been tempted to replace the mechanical hard drive in your laptop with a shiny new solid-state disk? Our expert did so, and here's what he found.
PARC showed erasable paper and other technologies that adds intelligence to documents with raw text.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
Long Tail Supplier Collaboration - What's In It For You?
Long Tail Supplier Collaboration - What's In It For You?
Download this webcast, free, compliments of Sterling Commerce
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
New Fujitsu High-End Itanium Windows- and Linux-Based PRIMEQUEST Servers Offer the Utmost in High Availability
New Fujitsu High-End Itanium-Based PRIMEQUEST Servers Offer Industry-Leading System Management for Linux and Windows
Symantec State of the Data Center Report 2007
View more whitepapers 
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the network security landscape has changed dramatically. Today's IT professionals still have the primary responsibility of protecting the confidentiality of corporate information, preventing unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.

Download this white paper 
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.

Download this white paper 
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.

View this demo