I'm using Eraser and it's a great tool!
It supports several wiping standards such as Guttmann
<http://www.usenix.org/publications/library/proceedings/sec96/full_paper
s/gutmann/>
(Default), Pseudorandom Data
<http://burtleburtle.net/bob/rand/isaacafa.html> and US DoD 5220-22.M
<http://www.dss.mil/isec/nispom.htm> methods.
It can also create a "nuke boot disk" to totally wipe a disk.

Fabio

Timmothy Lester ha scritto:
> I believe killdisk's free version only supports 1-pass, you have to pay
> for DoD wipes
>
> I forgot to mention a good utility called Eraser, which now includes
> DBAN. Eraser can be installed over the network and scheduled to erase
> unused disk-space, or files. It can use several different wiping
> methods, including DoDs. It's a must have...
>
> -----Original Message-----
> From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]]
> On Behalf Of ragdelaed (at) gmail (dot) com [email concealed]
> Sent: Thursday, March 27, 2008 10:57 AM
> To: security-basics (at) securityfocus (dot) com [email concealed]
> Subject: Re: DoD aproved disk wiping tool
>
> These support DOD 5220.22-M guidelines and are free. They may support
> 5200.28, not 100%. The non software based method is degaussing.
>
> KillDisk
> http://www.killdisk.com/downloadfree.htm
>
> Secure Erase. This is the purge approved method that seems to be the
> most efficient method. It works on SATA/ATA drives for the most part, no
> SCSI. Very fast. Free too.
> http://cmrr.ucsd.edu/people/Hughes/SecureErase.shtml
>
> I dont know of any network based tools that can wipe a drive. You might
> be able to mount the remote drive with linux and the dd it, but that
> would not be approved. I think dd local would meet requirements, but not
> network based.
>
> The hard part is that you have to deploy something to the remote target
> to keep the deletion going after the deletion has removed the functional
> parts of the drive and dropped it from the network. In order to verify
> this, I dont know if anyone would approve of a network based solution.
>
> Its best to pull it and wipe it locally.
>
>
>
>
>

[ reply ]