REPLY-TO-ALL is a double language blog (English/Russian) run by three information security practitioners. Want to discuss information security problems? This is the place.
Tuesday, July 29, 2008
Write Once Read Many
During preparation to some of the certification exams I encountered the term WORM - Write Once Read Many media. Surely I knew at least one example of it - CD-R or DVD-R discs - but the term was used in a way, that CD-R and DVD-R media can not support. For example, log files could be stored on such a media so that attacker is not able to tamper with them (again - CD-R would not fit this use as you can not write logs directly to CD so there always will be a lag between actual logs and what is stored on the CD). And I knew no WORM-type media that would fit such usage, until yesterday, when SanDisk announced their WORM flash memory. I really think this would be useful for forensics purposes and look forward to hearing actual uses of the technology. Hopefully you will really not be able to erase/modify the data through some undocumented feature :)
No comments:
Post a Comment