WipeDrive is a disk sanitizing tool that permanently erases all data from hard drives and other data storage devices. This includes but is not exclusive to: HPA partitions, DCO partitions, remapped sectors, operating systems, programs, and user files. This data is permanently destroyed as to make any type of forensic data recovery impossible.
\r\nThe TOE primarily provides data destruction in accordance with US DoD 5220.22-M. WipeDrive complies with all of the following disk wipe standards:
\r\nUpon completion of data sanitization an audit log is created detailing the wipe process. This includes the drive serial number, date of sanitization, pattern used, and protections removed. This audit log certifies compliance with the needed regulatory requirement(s).
\r\n","evaluation_configuration":"
Several different machines and configurations of said machines were used within the testing environment. PCs with ATA drives, PCs with a SCSI drive, and a Mac with an ATA drive were used within testing.
","security_evaluation_summary":"The evaluation was carried out in accordance with the Common Criteria Evaluation and Validation Scheme (CCEVS) processes and procedures. WipeDrive was evaluated against the criteria contained in the Common Criteria for Information Technology Security Evaluation, Version 3.1 Revision 3. The evaluation methodology used by the evaluation team to conduct the evaluation is the Common Methodology for Information Technology Security Evaluation, Version 3.1 Revision 3. It has been determined that the product meets the security criteria in the Security Target, which specifies an assurance level of EAL4 augmented with ALC_FLR.2 and ASE_TSS.2. Validators, on behalf of the CCEVS Validation Body, monitored the evaluation. The evaluation was completed in January 2011.
\r\n","environmental_strengths":"
Security Audit
\r\nThe TOE generates and captures audit data which is used to verify and document that an erasure event has occurred. Audit logs containing verification data (either denoting a success of failure) is stored in the Log Storage component. The resulting output of a wipe operation is displayed in an easily interpretable manner. Other events that are recorded include the start-up and shutdown of the audit functions and various parameters related to the TOE’s probe, scan, and subsequent erasure of targets on a drive. All audit operations can be associated with the administrator who performed that event. The TOE saves the audit events in commonly used user-readable formats outside of the TOE and provides a review of wipe results immediately following a wipe operation.
\r\n\r\n
Security Management
\r\nThe only users of the TOE are referred to as administrators. Administrators are the individuals who maintain physical access to the WipeDrive application, and, as a result, possess several management capabilities. Administrators are able to specify the location for audit storage (in the Log Storage component), specify the format in which this data is stored, create, run, view, or delete an administrator definable wipe pattern, scan for devices, view sector data, and get device info for all devices previously scanned.
\r\nThe TOE is equipped to operate via various interfaces which are made available to administrators. The administrators of the TOE utilize these interfaces to perform the management functions listed above. The primary purposes of these interfaces are to:
\r\nThe TOE can be operated via two user interfaces – a TUI (text user interface) or GUI (graphical user interface). The TUI runs on the same host as the WipeDrive application (back-end). It is used primarily for systems that do not have framebuffer support – which is typical on many architectures other than x86 like Sparc, PowerPC and PA-RISC. The GUI is also run on the same host as the back-end. This will be the default interface for x86 machines that support framebuffer graphics.
\r\n\r\n
Disk Erasure
\r\nThe TOE performs three distinct operations: scanning of devices, probing of devices, and the erasure of devices. Scanning and probing are performed during the initialization of the TOE. Administrators, whether via the GUI or TUI, can execute commands to wipe drives. The wipe command applies the administrator selected wipe pattern to each selected disk instance, which performs the overwrite operations directly on the disk.
\r\n\r\n
User Data Protection
\r\nThe TOE provides for the erasure of information. This erasure is initiated through the TUI (or GUI) and requires communication with the information repository (disk). The erasure of residual information is performed when an administrator selects a target device and wipe pattern. No residual information will reside in the RAM subsequent to a wipe event.
","features":[]}