You work for an IoT software-as-a-service (SaaS) provider. Your boss has asked you to research a way to effectively dispose of stored sensitive…

For a Software-as-a-Service (SaaS) provider, data is typically stored in a multi-tenant cloud environment where the provider does not have physical access to the underlying storage hardware. Crypto-shredding is the most effective and appropriate method in this context. This technique involves encrypting the data and then, to "delete" it, securely destroying the encryption key. Once the key is destroyed, the encrypted data (ciphertext) becomes permanently unrecoverable and is effectively erased. This logical sanitization method is ideal for virtualized and cloud environments as it does not require physical access to the media.

B. Degaussing: This is a physical process that uses powerful magnets to erase data from magnetic media. It is not feasible for a SaaS provider who does not control the physical hardware in a cloud data center.

C. Overwriting: This method is unreliable in modern cloud storage systems that use technologies like wear-leveling (in SSDs) and data deduplication, making it difficult to ensure the specific physical location of the data is overwritten.

D. Physical destruction: This method involves shredding or incinerating the storage media. It is impossible for a SaaS provider, as they are a tenant and do not own or have physical access to the cloud provider's hardware.

1. National Institute of Standards and Technology (NIST) Special Publication 800-88 Rev. 1

Guidelines for Media Sanitization.

Section 2.7

"Cryptographic Erase (CE)": This section details the process of using encryption to perform sanitization. It states

"For storage devices that support encryption

the data may be sanitized by erasing the media encryption key

leaving only the encrypted data on the device... CE is an effective and efficient way to sanitize data on a device." This directly supports the use of crypto-shredding.

2. Cloud Security Alliance (CSA)

Security Guidance for Critical Areas of Focus in Cloud Computing V4.0.

Domain 4

"Virtualization and Containers

" Section on Data-at-Rest Encryption: The guidance discusses that in a multi-tenant environment

"the most practical method for data destruction is often cryptographic. By encrypting all data and then destroying the key

the data is rendered unreadable." This highlights crypto-shredding as the standard for cloud environments.

3. University of California

Berkeley

CS 162: Operating Systems and System Programming

Lecture 22: Cloud Computing.

Slide on "Cloud Storage Security": Course materials often describe how cloud providers manage data deletion for tenants. They explain that due to the nature of distributed and virtualized storage

direct physical deletion is impractical. Instead

deleting the encryption keys associated with a tenant's data (crypto-shredding) is the standard operational procedure to ensure data is rendered inaccessible.