Hainan Island Incident
Secure Erase Commonly available tools for “secure erase” The Only NSA Approved Erasure Method: Obliteration Clearly, compromises are made in the interest of security: GMS SecureDNA™ is an answer NSA approved erasure methods: SecureDNA™: A Set of Security Features All GMS products have many differentiators relative to the competition NEW: Starting in 2017, we began quietly adding security features SecureDNA™ consists of: 1.Zeroize/Sanitize – A form of Secure Erase 2.BIOS erase 3.External status lines including remote zeroize 4.Mechanical anti-tamper switches 5.Write Protect 6.Encrypted drives 7.On-the-fly encryption 8.Authentication via TPM 2.0 Seeing Red for Security Zeroize / Secure Erase Zeroize / Sanitize / "Panic" Initiated by Two-factor initiation BIOS Erasure and Other SecureDNA™ Details When activated, zeroize can’t be stopped Drives either execute: Secure Erase Standards and Comparison Standard Action NSA 9-12 Erase and overwrite all locations with a known unclassified pattern. Verify the overwrite procedure by randomly rereading the overwritten information to confirm that only the known pattern can be recovered. NSA 130-2 Erase the media and overwrite with random data two times, then erase and overwrite with a character. DOD 5220.22-M Erase the media and overwrite with a single character, then erase again. DOD 5220.22-M Sup1 Erase the media and overwrite with a single character, then erase again and overwrite with a single character, then erase again overwrite with a random character, then erase again. Army AR 380-19 Erase the media and overwrite with random data, erase and overwrite with a character, then erase and overwrite with the complement of the character. Navy NAVSO P-5239-26 Erase the media and overwrite with random data, then erase again. Air Force AFSSI 5020 and AFSSI 8580 Erase the media and overwrite with a pattern, then repeat three times. IRIG 106-07 Erase the media, overwrite with 0x55, erase, overwrite with 0xAA, and then erase again. Then fill the drive with a repeating string of secure erase. Standard Duration NSA 9-12 11.1 min DOD 5220.22-M Sup1 11.4 min Army AR 380-19 33.5 min Navy NAVSO P-5239-26 49.5 min Air Force AFSSI 5020 and AFSSI 8580 11.1 min Times shown are for a 2.5-inch SSD, 512 GB, SATA II, SLC More About SecureDNA™ Anti-tamper switches Write Protect Encrypted drives Erasure algorithms On-the-fly encryption Authentication via TPM 2.0 SSDs and Security: Technology and Market Tracking GMS closely monitors the state-of-the-art
- Store the data securely (ie: encrypt the data)
- Easily remove 100% of the data and artifacts when under duress (ie: secure erase)
(shown below: removable drives, multi-Ethernet with switches, compute engine evolution)
