Data Removal Recommendations
1.0 Overview
2.0 Sanitizing Techniques
3.0 Suggested Software
4.0 Removal Tips
4.1 Windows
4.2 Macintosh
4.3 Unix Secure File Deletions
4.4 Solaris
5.0 Related Links
1.0 Overview
For the general user, the delete or format command appears to be the logical method of removing unwanted data files. These methods, however, are like sweeping something under the carpet: you may not be able to see it, but it's still there. All that deletion has done is remove the pointer to the files, with the data itself residing in unallocated space on the hard drive. This means that data recovery is possible using various software tools.
When sensitive information is stored on the hard drive of a machine that is to be surplussed or transferred to another individual or department, it is therefore imperative that extra measures be taken to wipe clean the hard drive before the computer leaves your area of responsibility. This document describes some common methods and software to assist you with the sanitization process. It also includes links to articles that provide detailed technical descriptions of what occurs during this process.
2.0 Sanitizing Techniques
As described in the much-referenced article Remembrance of Data Passed: A Study of Disk Sanitization Practices, the three most common techniques for properly sanitizing hard drives are:
1. Physically destroying the drive, rendering it unusable. This is a good alternative for defective hard drives or those that would be too costly to repair. For added security, the disk should be overwritten or degaussed prior to destruction.
2. Degaussing the drive to randomize the magnetic domains – most likely rendering the drive unusable in the process. Degaussing, or demagnetizing, applies a reverse magnetizing field to data stored on magnetic media, erasing the contents by returning the magnetic flux to a zero state.
3. Overwriting the drive's data so that it cannot be recovered. Overwriting replaces previously stored data on a drive or disk with a predetermined pattern of meaningless information, rendering the data unrecoverable.
The SANS white paper "Deleting Sensitive Information: Why hitting delete isn't enough"1 explains:
"...Overwriting data once is not usually good enough to prevent data recovery, instead it is recommended that
a minimum of three passes are made writing alternating zero and one patterns over the data and then further passes with random data, the more passes the better the chance that no data can ever be recovered."
NOTE: When removing sensitive information, don't forget CDs and floppies. Also, be sure to erase any stored names and numbers from phones and fax machines.
3.0 Suggested Software
The following chart is a collection of disk wiping software recommended by DCCs or listed on a variety of other University and security sites. The inclusion of any title does not indicate an endorsement by Brown University or the CIS department, and has only been provided as an aide in making a decision that best matches your specific needs.
Program |
Cost |
Platform |
Comments |
| Acronis DriveCleanser 6.0 |
$49.99 | Windows (includes Vista) | Deletes all the data and partitions on a hard disk. Wizard interface. Meets national data destruction standards. |
| BC Wipe |
Free trial, purchase $39.95 / $49.95 | Windows (inc Vista), Linus, Unix | |
| Burn 2.5 |
Free | Macintosh | Macintosh 8.5 and Mac OS HFS+ compatible |
| cyberCide 2.5 (CyberScrub) |
Free trial, purchase $29.95 | Windows XP | Erases files, folders, cookies, or an entire drive. Implements Gutmann patterns. |
| Darik's Boot and Nuke (DBAN) |
Shareware | OS independent | Will automatically and completely delete the contents of any hard disk it can detect, making it an appropriate utility for bulk or emergency data destruction |
| DTI Disk Wipe |
$49.00 | Windows (inc Vista) | |
| East-Tec Eraser 2008 |
$49.95 | Windows (inc Vista | Exceeds DoD standards; for the permanent erasure of digital info, including confidential documents, evidence of online activities |
| East-Tec DisposeSecure 2008 Enterprise |
1 technician, unlimited PCs - $199.95 | Windows (inc Vista) | Designed to remove all traces of data from hard disk, overwriting all data from every sector |
| Eraser |
Shareware | Windows XP and earlier | Completely removes sensitive data from a hard drive by overwriting it several times with carefully selected patterns |
| KillDisk (Active@KillDisk) |
Free version, Pro versions start at $39.95 | Windows (all), Linux, Unix for PC | Conforms to DoD sanitizing standards and uses Gutmann's data destruction method |
| Norton SystemWorks |
$69.99 | Windows (inc Vista) | Permanently removes sensitive files, rootkits and internet activity |
| NTI: Dragon Burn |
Free trial, purchase $40.00 (OS X), $19.95 (OS 9.0.4+) | Macintosh | |
| NTI: Disk Scrub | $500 - part of Data Elimination Suite - .trial version available | Windows XP | To eliminate all traces of data and programs |
| NTI: M-Sweep Pro Data Eliminator | " " |
" " |
To leave SW loaded and operational |
| Ontrack Eraser |
~$600 (professional, 50 erasures) | Windows (inc Vista) | Erases partitions, directories, boot records; includes DoD specs |
| Paragon Disk Wiper |
$29.95 (personal) $149.95 (professional) |
Windows (inc Vista) | Disk Wiper Pro meets DoD sanitizing standards; includes 10 different disk sanitization methods |
| ShredIt | Free trial, $24.95 (download version) | Windows (inc Vista) , Mac (8, 9 & OS X) | Easy interface, configurable overwrite pattern and number of overwrites |
| ShredIt X - 5.8.3 | Shareware | Mac OS X or later |
Firel shredder, hard drive cleaner |
| SuperScrubber 2.0 |
$29.99 | Mac OS X 10.2.6 or later | |
| UniShred Pro |
Contact vendor for quote | Solaris, HP-UX, IBM-AIX, SGI-IRIX and Linux | Implements all relevant DoD standards and allows custom patterns |
| Wipe |
Shareware | Linux, Unix | Uses Gutmann's erase patterns, erasing single files and accompanying metadata or entire disks |
| WipeDrive |
$39.95 | Bootable PC disk | DoD approved; securely erases IDE and SCSI drives; unlimited wiping of 5 unique hard drives |
4.0 Removal Tips
4.1 Windows
Each of the software products listed above comes with specific instructions, some with an easy-to-use wizard interface. KillDisk (recommended by some DCCs) is the software of choice at Northern Illinois University. Their support for this product includes detailed instructions on its use.
Dell offers an overview document Erasing Data from Your Hard Drive and a link to CNET's (download.com) listing of rated disk wiping software.
4.2 Macintosh
In addition to the software offered above, Mac computer hard drives can be cleared by zeroing their data. The Apple site provides step-by-step instructions for both Mac OS 8.x/9.x and OS X plus a good overview of when to reformat a hard drive (see Troubleshooting Hard Drives: Reformatting). Note that zeroing data (aka "low level" format) may take a long time and depends on the hard disk size. It is recommended to use the "8-way random" feature in conjunction with the "zero all data" option.
- Mac OS 9: How to Initialize or Format a Disk (docs.info.apple.com/article.html?artnum=50447)
- Mac OS X: How to Zero All Data on a Disk (docs.info.apple.com/article.html?artnum=107437)
- Mac OS X 10.3: Erasing a Disk or a Volume (docs.info.apple.com/article.html?artnum=152060)
- Disk First Aid 8.6.1: Software and Information (docs.info.apple.com/article.html?artnum=75102)
For a general search of the the Apple Knowledge Base, go to: kbase.info.apple.com/index.jsp.
4.3 Unix Secure File Deletions
4.4 Solaris
5.0 Related Links
Compendium of disk wiping software:
- Acronis DriveCleanser 6.0: www.acronis.com/products/drivecleanser/
- BC Wipe: www.jetico.com/order.php?bcwipe=1
- Burn 2.5: www.securemac.com/burn.php
- cyberCide 2.5 (CyberScrub):www.cyberscrub.com/cybercide/
- Darik's Boot and Nuke (DBAN): sourceforge.net/project/showfiles.php?group_id=61951
- DTI Disk Wipe: www.dtidata.com/products_disk_wipe.asp
- East-Tec Eraser 2008: www.east-tec.com/eraser/index.htm
- East-Tec DisposeSecure 2008 Enterprise: www.east-tec.com/sanitizer/index.htm
- Eraser: http://sourceforge.net/projects/eraser
- KillDisk (Active@KillDisk): killdisk.com/
- Norton SystemWorks: http://www.symantec.com/norton/systemworks
- NTI (New Technologies):
Dragon Burn: https://secure.ntius.com/esdsoft/dragonburn_v4_full.asp
Disk Scrub: www.secure-data.com/diskscrb.html
M-Sweep Pro Data Eliminator: www.secure-data.com/ms.html
- Ontrack Eraser: www.ontrackdatarecovery.com/hard-drive-software/ontrack-eraser.aspx
- Paragon Disk Wiper: www.disk-wiper.com/
- ShredIt: www.mireth.com/shredit.html
- ShredItX: www.versiontracker.com/dyn/moreinfo/macosx/12833
- SuperScrubber 2.0: http://www.macupdate.com/info.php/id/10633
- UniShred Pro:http://www.lat.com/Our_Products.html
- Wipe: sourceforge.net/projects/wipe/
- WipeDrive: www.whitecanyon.com/wipedrive-erase-hard-drive.php
Other disk wiping software options:
- CNET (Computer Network recommendations) (www.download.com/3120-20-0.html?qt=wipe&tg=dl-2001)
Further Reading:
- Special Publication 800-88: Guidelines for Media Sanitization by the National
Institute of Standards and Technology (NIST)
(http://csrc.nist.gov/publications/nistpubs/#sp800-88)
- 1 Deleting Sensitive Information:Why Hitting Delete Isn't Enough by Hans Zetterstrom (www.sans.org/rr/papers/index.php?id=691)
- Remembrance of Data Passed: A Study of Disk Sanitization Practices by Simson L. Garfinkel and Abhi Shelat, MIT (IEEE Computer Society, Security & Privacy, vol. 1, no. 1, 2003) (http://ieeexplore.ieee.org/search/wrapper.jsp?arnumber=1176992)
- Precautions When Selling, Trading, or Sending a PC to Salvage or to a Repair Shop by H. D. Knoble, Penn State
(ftp.aset.psu.edu/pub/ger/documents/SecureFixedDiskWiping.html) - Secure Deletion of Data from Magnetic and Solid-State Memory by Peter Gutmann, University of Auckland
(www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html) - What You Don't See On Your Hard Drive SANS (www.sans.org/rr/papers/27/653.pdf)
- Secure File Deletion, Fact or Fiction? SANS (www.sans.org/rr/incident/deletion.php)
- Securely Deleting Files SANS (www.giac.org/practical/gsec/John_Kinney_GSEC.pdf)
Related sites at other universities:
- University of Arizona: Sanitization of Hard Drives (security.arizona.edu/DisposalofHardDrives.pdf)
- Indiana University IT Security Office (http://itso.iu.edu/Securely_Removing_Data)
- University of Minnesota OIT Security (www1.umn.edu/oit/security/assureddelete.shtml)
- University of Pennsylvania Information Security (www.upenn.edu/computing/security/advisories/old_computers.html)
- Emory University Office of IT (it.emory.edu/showdoc.cfm?docid=1854&fr=1027)
Internally Reviewed and Updated: August 12, 2008