Skip to main content
USENIX
  • Conferences
  • Students
Sign in

connect with us


  •  Twitter
  •  Facebook
  •  LinkedIn
  •  Google+
  •  YouTube

twitter

Tweets by @usenix

usenix conference policies

  • Event Code of Conduct
  • Conference Network Policy
  • Statement on Environmental Responsibility Policy

You are here

Home » Shredding Your Garbage: Reducing Data Lifetime Through Secure Deallocation
Tweet

connect with us

Shredding Your Garbage: Reducing Data Lifetime Through Secure Deallocation

Abstract: 

Today's operating systems, word processors, web browsers, and other common software take no measures to promptly remove data from memory. Consequently, sensitive data, such as passwords, social security numbers, and confidential documents, often remains in memory indefinitely, significantly increasing the risk of exposure.

We present a strategy for reducing the lifetime of data in memory called secure deallocation. With secure deallocation we zero data either at deallocation or within a short, predictable period afterward in general system allocators (e.g.Êuser heap, user stack, kernel heap). This substantially reduces data lifetime with minimal implementation effort, negligible overhead, and without modifying existing applications.

We demonstrate that secure deallocation generally clears data immediately after its last use, and that without such measures, data can remain in memory for days or weeks, even persisting across reboots. We further show that secure deallocation promptly eliminates sensitive data in a variety of important real world applications.

Jim Chow, Stanford University

Ben Pfaff, Stanford University

Tal Garfinkel, Stanford University

Mendel Rosenblum, Stanford University

BibTeX
@inproceedings {269238,
author = {Jim Chow and Ben Pfaff and Tal Garfinkel and Mendel Rosenblum},
title = {Shredding Your Garbage: Reducing Data Lifetime Through Secure Deallocation},
booktitle = {14th USENIX Security Symposium (USENIX Security 05)},
year = {2005},
address = {Baltimore, MD},
url = {https://www.usenix.org/conference/14th-usenix-security-symposium/shredding-your-garbage-reducing-data-lifetime-through},
publisher = {USENIX Association},
month = jul,
}
Download

Links

Paper: 
http://usenix.org/publications/library/proceedings/sec05/tech/full_papers/chow/chow.pdf
Paper (HTML): 
http://usenix.org/publications/library/proceedings/sec05/tech/full_papers/chow/chow_html/index.html
  • Log in or    Register to post comments

© USENIX

  • Privacy Policy
  • Contact Us