Overwriting Hard Drive Data: The Great Wiping Controversy

  • Authors:
  • Craig Wright;Dave Kleiman;Shyaam Sundhar R.S.

  • Affiliations:
  • BDO Kendalls, Sydney, Australia;ComputerForensicExaminer.com, Florida, US;Symantec, USA

  • Venue:
  • ICISS '08 Proceedings of the 4th International Conference on Information Systems Security
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Often we hear controversial opinions in digital forensics on the required or desired number of passes to utilize for properly overwriting, sometimes referred to as wiping or erasing, a modern hard drive. The controversy has caused much misconception, with persons commonly quoting that data can be recovered if it has only been overwritten once or twice. Moreover, referencing that it actually takes up to ten, and even as many as 35 (referred to as the Gutmann scheme because of the 1996 Secure Deletion of Data from Magnetic and Solid-State Memory published paper by Peter Gutmann) passes to securely overwrite the previous data. One of the chief controversies is that if a head positioning system is not exact enough, new data written to a drive may not be written back to the precise location of the original data. We demonstrate that the controversy surrounding this topic is unfounded.