Data Recovery from "Scrubbed" NAND Flash Storage: Need for Analog Sanitization
Data Recovery from "Scrubbed" NAND Flash Storage: Need for Analog Sanitization
复制标题
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
M. Hasan;B. Ray
中科院分区：
文献类型：
--
作者：
M. Hasan;B. Ray
基于闪存的非易失性存储系统的数字清理是一个经过深入研究的课题。由于闪存单元以模拟阈值电压保存信息，因此即使在数字清理之后，闪存单元也可能保留先前写入数据的印记。在本文中，我们展示了通过基于“清理”的技术清理的闪存介质中的数据可以部分或完全恢复，这是 NAND 闪存中页面删除的一种流行技术。我们发现，攻击者可以利用存储器单元的数据保留特性，使用存储器的标准数字接口来恢复已删除的数据。我们通过在芯片上使用部分擦除操作来演示从商用闪存芯片中恢复数据，并通过清理进行清理。我们的结果表明，需要模拟清理来安全地删除闪存系统中的信息。我们根据文件创建时间信息提出并使用部分程序操作来实现模拟清理。
Digital sanitization of flash based non-volatile memory system is a well-researched topic. Since flash memory cell holds information in the analog threshold voltage, flash cell may hold the imprints of previously written data even after digital sanitization. In this paper, we show that data is partially or completely recoverable from the flash media sanitized with “scrubbing” based technique, which is a popular technique for page deletion in NAND flash. We find that adversary may utilize the data retention property of the memory cells for recovering the deleted data using standard digital interfaces with the memory. We demonstrate data recovery from commercial flash memory chip, sanitized with scrubbing, by using partial erase operation on the chip. Our results show that analog scrubbing is needed to securely delete information in flash system. We propose and implement analog scrubbing using partial program operation based on the file creation time information.