CNS Core: Small: Ensuring Privacy by Runtime Analog Sanitization of Solid State Storage Devices

CNS 核心：小型：通过固态存储设备的运行时模拟清理确保隐私

• 批准号: 2403540
• 负责人: Biswajit Ray
• 金额: $ 49.69万
• 依托单位: Colorado State University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2023
• 资助国家: 美国
• 起止时间: 2023-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2403540&HistoricalAwards=false
• 关键词: CNS; Core; Small; Ensuring; Privacy

Non-volatile flash memories, the basic building blocks of solid-state storage devices, offer small form factors, high-capacity, high-speed, and low-power permanent storage solutions in a wide range of computing systems found in consumer electronics, automotive, military, industrial, healthcare, and enterprise segments. Unfortunately, deleting data instantly from physical flash memories is not always straightforward as it incurs hefty overheads and increases wear level, especially in solid-state drives (SSDs). According to a recent report, 42% of used SSDs sold on eBay held sensitive recoverable data, even though data deletion or sanitization methods were in place. Whereas standard data deletion methods make the data inaccessible to the user through standard interfaces, our recent research efforts demonstrate that the deleted data is partially or fully recoverable by means of physical characterization of flash memory cells. This underscores the need for finding new ways to ensure that deleted data is promptly, permanently, and irreversibly re-moved from flash memories. This project is investigating new cost-effective instant data sanitization techniques for flash memories. The proposed techniques take advantage of (a) timeline of recent flash operations; (b) physical properties of flash memory cells cap-tured by state decay models and (c) partial flash program and erase operations. These techniques will be tailored to uti-lize the unique properties and architectures of flash-memory chips found in commercial storage applications. The proposed techniques will be applicable to different types of flash memories, will require no or minimal changes in hardware, and will not increase the wear level of flash memories nor significantly increase the latency of common flash operations. Techniques for cost-effective data sanitization of flash memories in run-time will benefit consumers, industry, and government alike by ensuring that deleted data is not recoverable at any time during the product’s life cycle. These techniques will be deployed in the firmware of flash memory controllers. A direct outcome of this proposal will be the training of three graduate students in the important area of hardware-oriented security and memory systems. The investigators are developing teaching materials to introduce hardware-oriented security topics in embedded systems, computer systems architecture, and hardware reliability courses.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

非易失性闪存是固态存储设备的基本构建块，在消费电子、汽车、军事、工业、医疗保健和企业领域的各种计算系统中提供小尺寸、高容量、高速和低功耗的永久存储解决方案。不幸的是，从物理闪存中立即删除数据并不总是简单的，因为它会产生巨大的开销并增加磨损水平，特别是在固态硬盘（SSD）中。根据最近的一份报告，eBay上出售的二手SSD中有42%持有敏感的可恢复数据，即使数据删除或清理方法已经到位。而标准的数据删除方法使数据无法访问用户通过标准接口，我们最近的研究工作表明，删除的数据是部分或全部恢复的闪存单元的物理特性的手段。这强调了寻找新方法的必要性，以确保被删除的数据被迅速、永久和不可逆地从闪存中重新移动。该项目正在研究用于闪存的新的经济高效的即时数据清理技术。所提出的技术利用（a）最近的闪存操作的时间轴;（B）由状态衰减模型捕获的闪存单元的物理性质;以及（c）部分闪存编程和擦除操作。这些技术将被定制，以利用商业存储应用中发现的闪存芯片的独特属性和架构。所提出的技术将适用于不同类型的闪存，将不需要或需要最小的硬件变化，并且将不会增加闪存的磨损水平，也不会显著增加常见闪存操作的延迟。在运行时对闪存进行经济有效的数据清理的技术将通过确保在产品生命周期的任何时候都无法恢复已删除的数据而使消费者、行业和政府等受益。这些技术将部署在闪存控制器的固件中。这项建议的一个直接成果将是在面向硬件的安全和存储系统的重要领域培训三名研究生。研究人员正在开发教学材料，在嵌入式系统，计算机系统架构和硬件可靠性课程中引入面向硬件的安全主题。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。