SoK: Secure Data Deletion

Reardon, Joel; Basin, David; Čapkun, Srđjan

doi:10.1109/sp.2013.28

Cited by 109 publications

(59 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…While popular with users who perceived this feature as an effective solution to some of their security and privacy needs, Snapchat offers little security against motivated attackers, and secure data deletion in messaging has proved elusive [32]- [34]. Other tools that appear to provide certain security properties fail to provide these properties in the face of government requests [3].…”

Section: A Secure Communicationsmentioning

confidence: 99%

Obstacles to the Adoption of Secure Communication Tools

Abu-Salma

Sasse

Bonneau

et al. 2017

2017 IEEE Symposium on Security and Privacy (SP)

113

View full text Add to dashboard Cite

Abstract-The computer security community has advocated widespread adoption of secure communication tools to counter mass surveillance. Several popular personal communication tools (e.g., WhatsApp, iMessage) have adopted end-to-end encryption, and many new tools (e.g., Signal, Telegram) have been launched with security as a key selling point. However it remains unclear if users understand what protection these tools offer, and if they value that protection. In this study, we interviewed 60 participants about their experience with different communication tools and their perceptions of the tools' security properties. We found that the adoption of secure communication tools is hindered by fragmented user bases and incompatible tools. Furthermore, the vast majority of participants did not understand the essential concept of end-to-end encryption, limiting their motivation to adopt secure tools. We identified a number of incorrect mental models that underpinned these beliefs.

show abstract

Section: A Secure Communicationsmentioning

confidence: 99%

Obstacles to the Adoption of Secure Communication Tools

Abu-Salma

Sasse

Bonneau

et al. 2017

2017 IEEE Symposium on Security and Privacy (SP)

113

View full text Add to dashboard Cite

show abstract

“…In the research community, there have been a number of efforts toward creating self-destructing data, including early work by Perlman [22] and more recent work on Vanish [11,12], as well as work on attacking specific implementations of Vanish with Sybil attacks [33]. An analysis of different approaches for secure data deletion appears in [23]. There have also been significant efforts toward ephemeral two-way communications, such as the off-the-record messaging system [4,13].…”

Section: Related Workmentioning

confidence: 99%

Sex, Lies, or Kittens? Investigating the Use of Snapchat’s Self-Destructing Messages

Roesner

Gill

Kohno

2014

Financial Cryptography and Data Security

View full text Add to dashboard Cite

Abstract. The privacy-related Snapchat smartphone application allows users to share time-limited photos or videos, which "disappear" after a specified number of seconds once opened. This paper describes the results of a user survey designed to help us understand how and why people use the Snapchat application. We surveyed 127 adult Snapchat users, finding that security is not a major concern for the majority of these respondents. We learn that most do not use Snapchat to send sensitive content (although up to 25% may do so experimentally), that taking screenshots is not generally a violation of the sender's trust but instead common and expected, that most respondents understand that messages can be recovered, and that security and privacy concerns are overshadowed by other influences on how and why respondents choose to use or not use Snapchat. Nevertheless, we find that a non-negligible fraction (though not a majority) of respondents have adapted or would adapt their behavior in response to understanding Snapchat's (lack of) security properties, suggesting that there remains an opportunity for a more secure messaging application. We reflect on the implications of our findings for Snapchat and on the design of secure messaging applications.

show abstract

“…For the past two decades, this subject has been extensively studied by researchers in both academia and industry, resulting in a rich body of literature [5], [7], [8], [13], [14], [17], [23], [25], [26], [28], [33], [35]. A recent survey on this topic is published in [27] .…”

Section: Introductionmentioning

confidence: 99%

Deleting Secret Data with Public Verifiability

Hao

Clarke

Zorzo

2016

IEEE Trans. Dependable and Secure Comput.

View full text Add to dashboard Cite

Abstract-Existing software-based data erasure programs can be summarized as following the same one-bit-return protocol: the deletion program performs data erasure and returns either success or failure. However, such a one-bit-return protocol turns the data deletion system into a black box -the user has to trust the outcome but cannot easily verify it. This is especially problematic when the deletion program is encapsulated within a Trusted Platform Module (TPM), and the user has no access to the code inside. In this paper, we present a cryptographic solution that aims to make the data deletion process more transparent and verifiable. In contrast to the conventional black/white assumptions about TPM (i.e., either completely trust or distrust), we introduce a third assumption that sits in between: namely, "trust-but-verify". Our solution enables a user to verify the correct implementation of two important operations inside a TPM without accessing its source code: i.e., the correct encryption of data and the faithful deletion of the key. Finally, we present a proof-of-concept implementation of the SSE system on a resource-constrained Java card to demonstrate its practical feasibility. To our knowledge, this is the first systematic solution to the secure data deletion problem based on a "trust-but-verify" paradigm, together with a concrete prototype implementation.

show abstract

SoK: Secure Data Deletion

Cited by 109 publications

References 16 publications

Obstacles to the Adoption of Secure Communication Tools

Obstacles to the Adoption of Secure Communication Tools

Sex, Lies, or Kittens? Investigating the Use of Snapchat’s Self-Destructing Messages

Deleting Secret Data with Public Verifiability

Contact Info

Product

Resources

About