I'm using Eraser and it's a great tool!
It supports several wiping standards such as Guttmann
<http://www.usenix.org/publications/library/proceedings/sec96/full_papers/gutmann/>
(Default), Pseudorandom Data
<http://burtleburtle.net/bob/rand/isaacafa.html> and US DoD 5220-22.M
<http://www.dss.mil/isec/nispom.htm> methods.
It can also create a "nuke boot disk" to totally wipe a disk.
Fabio
Timmothy Lester ha scritto:
I believe killdisk's free version only supports 1-pass, you have to pay
for DoD wipes
I forgot to mention a good utility called Eraser, which now includes
DBAN. Eraser can be installed over the network and scheduled to erase
unused disk-space, or files. It can use several different wiping
methods, including DoDs. It's a must have...
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of ragdelaed@gmail.com
Sent: Thursday, March 27, 2008 10:57 AM
To: security-basics@securityfocus.com
Subject: Re: DoD aproved disk wiping tool
These support DOD 5220.22-M guidelines and are free. They may support
5200.28, not 100%. The non software based method is degaussing.
KillDisk
http://www.killdisk.com/downloadfree.htm
Secure Erase. This is the purge approved method that seems to be the
most efficient method. It works on SATA/ATA drives for the most part, no
SCSI. Very fast. Free too.
http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
I dont know of any network based tools that can wipe a drive. You might
be able to mount the remote drive with linux and the dd it, but that
would not be approved. I think dd local would meet requirements, but not
network based.
The hard part is that you have to deploy something to the remote target
to keep the deletion going after the deletion has removed the functional
parts of the drive and dropped it from the network. In order to verify
this, I dont know if anyone would approve of a network based solution.
Its best to pull it and wipe it locally.
