Ghosts of Deletions Past: New Secure Deletion Challenges and Solutions

Sarah M. Diesburg

DOI: https://doi.org/10.48550/arXiv.1611.04216

2016-11-14

Abstract:Is secure deletion of data still a problem?

Cryptography and Security

What problem does this paper attempt to address?

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

Jian Liu,N. Asokan,Benny Pinkas

DOI: https://doi.org/10.1145/2810103.2813623

2015-01-01

Abstract:Encrypting data on client-side before uploading it to a cloud storage is essential for protecting users' privacy. However client-side encryption is at odds with the standard practice of deduplication. Reconciling client-side encryption with cross-user deduplication is an active research topic. We present the first secure cross-user deduplication scheme that supports client-side encryption without requiring any additional independent servers. Interestingly, the scheme is based on using a PAKE (password authenticated key exchange) protocol. We demonstrate that our scheme provides better security guarantees than previous efforts. We show both the effectiveness and the efficiency of our scheme, via simulations using realistic datasets and an implementation.
Making space for the future: the importance of deletion for librarianship and information science and the information society

Helene Hellmich,Jesse David Dinneen,,

DOI: https://doi.org/10.47989/irisic2219

2022-01-01

Abstract:The information society generally, and information studies specifically, are understandably concerned with productive actions done with data and information, like preservation, access, and (re)use over time. While such concerns are important and their related activities are clearly valuable, we will soon be facing limits to storage and related resources, and so information scholars and practitioners must more fully consider and support the complementary part of the information lifecycle: deletion. We outline the growing necessity of data and information deletion for social and environmental sustainability through several example concerns. We then consider several challenges of and to deleting that must be considered and addressed, from societal to individual scales, by drawing on works in information behaviour, personal information management, human-computer interaction, and the history, philosophy, and ethics of information. Deletion is an understudied phenomenon of growing importance, and although it has a broadly negative perception in comparison to preservation, it has some notable advantages for individuals and society. Information scholars and practitioners have an important role to play in understanding and supporting deletion; recommendations for each are provided here.

information science & library science
ExD: Explainable Deletion

Kopo M. Ramokapane,Awais Rashid

2023-08-25

Abstract:This paper focuses on a critical yet often overlooked aspect of data in digital systems and services-deletion. Through a review of existing literature we highlight the challenges that user face when attempting to delete data from systems and services, the lack of transparency in how such requests are handled or processed and the lack of clear assurance that the data has been deleted. We highlight that this not only impacts users' agency over their data but also poses issues with regards to compliance with fundamental legal rights such as the right to be forgotten. We propose a new paradign-explainable deletion-to improve users' agency and control over their data and enable systems to deliver effective assurance, transparency and compliance. We discuss the properties required of such explanations and their relevance and benefit for various individuals and groups involved or having an interest in data deletion processes and implications. We discuss various design implications pertaining to explainable deletion and present a research agenda for the community.

Human-Computer Interaction
Empirical Understanding of Deletion Privacy: Experiences, Expectations, and Measures

Mohsen Minaei,Mainack Mondal,Aniket Kate

DOI: https://doi.org/10.48550/arXiv.2008.11317

2020-08-26

Cryptography and Security

Abstract:Social platforms are heavily used by individuals to share their thoughts and personal information. However, due to regret over time about posting inappropriate social content, embarrassment, or even life or relationship changes, some past posts might also pose serious privacy concerns for them. To cope with these privacy concerns, social platforms offer deletion mechanisms that allow users to remove their contents. Quite naturally, these deletion mechanisms are really useful for removing past posts as and when needed. However, these same mechanisms also leave the users potentially vulnerable to attacks by adversaries who specifically seek the users' damaging content and exploit the act of deletion as a strong signal for identifying such content. Unfortunately, today user experiences and contextual expectations regarding such attacks on deletion privacy and deletion privacy in general are not well understood. To that end, in this paper, we conduct a user survey-based exploration involving 191 participants to unpack their prior deletion experiences, their expectations of deletion privacy, and how effective they find the current deletion mechanisms. We find that more than 80% of the users have deleted at least a social media post, and users self-reported that, on average, around 35% of their deletions happened after a week of posting. While the participants identified the irrelevancy (due to time passing) as the main reason for content removal, most of them believed that deletions indicate that the deleted content includes some damaging information to the owner. Importantly, the participants are significantly more concerned about their deletions being noticed by large-scale data collectors (e.g., the government) than individuals from their social circle. Finally, the participants felt that popular deletion mechanisms are not very effective in protecting the privacy of those deletions.
Research on Secure Destruction of Digital Information

Hao Dong,She Kun,Cheng Yu

DOI: https://doi.org/10.1109/icacia.2009.5361082

2009-01-01

Abstract:This paper is about an interdisciplinary knowledge relating to computer science and solid state electronics. The normal FORMAT or DELET operation in computer can not verily eras the data on the hard disk. By using precision instruments, the data could be recognized and recovered. Based on the intensive study in characteristic of magnetic medium and the data encoding rules, this paper represents an effective theory to destruct data from hard disk without specialized equipment. And finally, it proposes a feasible solution for the data destruction software on Linux and Windows operating system.
Investigation of Data Deletion Vulnerabilities in NAND Flash Memory Based Storage

Abhilash Garg,Supriya Chakraborty,Manoj Malik,Devesh Kumar,Satyajeet Singh,Manan Suri

DOI: https://doi.org/10.48550/arXiv.2001.07424

2020-01-21

Abstract:Semiconductor NAND Flash based memory technology dominates the electronic Non-Volatile storage media market. Though NAND Flash offers superior performance and reliability over conventional magnetic HDDs, yet it suffers from certain data-security vulnerabilities. Such vulnerabilities can expose sensitive information stored on the media to security risks. It is thus necessary to study in detail the fundamental reasons behind data-security vulnerabilities of NAND Flash for use in critical applications. In this paper, the problem of unreliable data-deletion/sanitization in commercial NAND Flash media is investigated along with the fundamental reasons leading to such vulnerabilities. Exhaustive software based data recovery experiments (multiple iterations) has been carried out on commercial NAND Flash storage media (8 GB and 16 GB) for different types of filesystems (NTFS and FAT) and OS specific delete/Erase instructions. 100 % data recovery is obtained for windows and linux based delete/Erase commands. Inverse effect of performance enhancement techniques like wear levelling, bad block management etc. is also observed with the help of software based recovery experiments.

Cryptography and Security
Deletion-Compliance in the Absence of Privacy

Jonathan Godin,Philippe Lamontagne

DOI: https://doi.org/10.1109/PST52912.2021.9647774

2022-01-11

Abstract:Garg, Goldwasser and Vasudevan (Eurocrypt 2020) invented the notion of deletion-compliance to formally model the "right to be forgotten", a concept that confers individuals more control over their digital data. A requirement of deletion-compliance is strong privacy for the deletion requesters since no outside observer must be able to tell if deleted data was ever present in the first place. Naturally, many real world systems where information can flow across users are automatically ruled out. The main thesis of this paper is that deletion-compliance is a standalone notion, distinct from privacy. We present an alternative definition that meaningfully captures deletion-compliance without any privacy implications. This allows broader class of data collectors to demonstrate compliance to deletion requests and to be paired with various notions of privacy. Our new definition has several appealing properties: - It is implied by the stronger definition of Garg et al. under natural conditions, and is equivalent when we add a privacy requirement. - It is naturally composable with minimal assumptions. - Its requirements are met by data structure implementations that do not reveal the order of operations, a concept known as history-independence. Along the way, we discuss the many challenges that remain in providing a universal definition of compliance to the "right to be forgotten."

Cryptography and Security
Secret Sharing with Certified Deletion

James Bartusek,Justin Raizes

2024-05-14

Abstract:Secret sharing allows a user to split a secret into many shares so that the secret can be recovered if, and only if, an authorized set of shares is collected. Although secret sharing typically does not require any computational hardness assumptions, its security does require that an adversary cannot collect an authorized set of shares. Over long periods of time where an adversary can benefit from multiple data breaches, this may become an unrealistic assumption.

Cryptography and Security
Accelerating Secure and Verifiable Data Deletion in Cloud Storage via SGX and Blockchain

Xiangman Li,Jianbing Ni

2023-08-04

Abstract:Secure data deletion enables data owners to fully control the erasure of their data stored on local or cloud data centers and is essential for preventing data leakage, especially for cloud storage. However, traditional data deletion based on unlinking, overwriting, and cryptographic key management either ineffectiveness in cloud storage or rely on unpractical assumption. In this paper, we present SevDel, a secure and verifiable data deletion scheme, which leverages the zero-knowledge proof to achieve the verification of the encryption of the outsourced data without retrieving the ciphertexts, while the deletion of the encryption keys are guaranteed based on Intel SGX. SevDel implements secure interfaces to perform data encryption and decryption for secure cloud storage. It also utilizes smart contract to enforce the operations of the cloud service provider to follow service level agreements with data owners and the penalty over the service provider, who discloses the cloud data on its servers. Evaluation on real-world workload demonstrates that SevDel achieves efficient data deletion verification and maintain high bandwidth savings.

Cryptography and Security
Cryptography with Certified Deletion

James Bartusek,Dakshita Khurana

DOI: https://doi.org/10.48550/arXiv.2207.01754

2023-04-21

Abstract:We propose a new, unifying framework that yields an array of cryptographic primitives with certified deletion. These primitives enable a party in possession of a quantum ciphertext to generate a classical certificate that the encrypted plaintext has been information-theoretically deleted, and cannot be recovered even given unbounded computational resources. - For X \in {public-key, attribute-based, fully-homomorphic, witness, timed-release}, our compiler converts any (post-quantum) X encryption to X encryption with certified deletion. In addition, we compile statistically-binding commitments to statistically-binding commitments with certified everlasting hiding. As a corollary, we also obtain statistically-sound zero-knowledge proofs for QMA with certified everlasting zero-knowledge assuming statistically-binding commitments. - We also obtain a strong form of everlasting security for two-party and multi-party computation in the dishonest majority setting. While simultaneously achieving everlasting security against all parties in this setting is known to be impossible, we introduce everlasting security transfer (EST). This enables any one party (or a subset of parties) to dynamically and certifiably information-theoretically delete other participants' data after protocol execution. We construct general-purpose secure computation with EST assuming statistically-binding commitments, which can be based on one-way functions or pseudorandom quantum states. We obtain our results by developing a novel proof technique to argue that a bit b has been information-theoretically deleted from an adversary's view once they output a valid deletion certificate, despite having been previously information-theoretically determined by the ciphertext they held in their view. This technique may be of independent interest.

Quantum Physics,Cryptography and Security
Why Data Deletion Fails? A Study on Deletion Flaws and Data Remanence in Android Systems.

Junliang Shu,Yuanyuan Zhang,Juanru Li,Bodong Li,Dawu Gu

DOI: https://doi.org/10.1145/3007211

2017-01-01

ACM Transactions on Embedded Computing Systems

Abstract:Smart mobile devices are becoming the main vessel of personal privacy information. While they carry valuable information, data erasure is somehow much more vulnerable than was predicted. The security mechanisms provided by the Android system are not flexible enough to thoroughly delete sensitive data. In addition to the weakness among several provided data-erasing and file-deleting mechanisms, we also target the Android OS design flaws in data erasure, and unveil that the design of the Android OS contradicts some secure data-erasure demands. We present the data-erasure flaws in three typical scenarios on mainstream Android devices, such as the data clearing flaw , application uninstallation flaw , and factory reset flaw . Some of these flaws are inherited data-deleting security issues from the Linux kernel, and some are new vulnerabilities in the Android system. Those scenarios reveal the data leak points in Android systems. Moreover, we reveal that the data remanence on the disk is rarely affected by the user’s daily operation, such as file deletion and app installation and uninstallation, by a real-world data deletion latency experiment. After one volunteer used the Android phone for 2 months, the data remanence amount was still considerable. Then, we proposed DataRaider for file recovering from disk fragments. It adopts a file-carving technique and is implemented as an automated sensitive information recovering framework. DataRaider is able to extract private data in a raw disk image without any file system information, and the recovery rate is considerably high in the four test Android phones. We propose some mitigation for data remanence issues, and give the users some suggestions on data protection in Android systems.
How to Delete Without a Trace: Certified Deniability in a Quantum World

Alper Çakan,Vipul Goyal,Justin Raizes

2024-11-08

Abstract:Is it possible to comprehensively destroy a piece of quantum information, so that nothing is left behind except the memory of whether one had it at one point? For example, various works, most recently Morimae, Poremba, and Yamakawa (TQC 2024), show how to construct a signature scheme with certified deletion where a user who deletes a signature on m cannot later produce a signature for m. However, in all of the existing schemes, even after deletion the user is still able keep irrefutable evidence that m was signed, and thus they do not fully capture the spirit of deletion. In this work, we initiate the study of certified deniability in order to obtain a more comprehensive notion of deletion. Certified deniability uses a simulation-based security definition, ensuring that any information the user has kept after deletion could have been learned without being given the deleteable object to begin with; meaning that deletion leaves no trace behind! We define and construct two non-interactive primitives that satisfy certified deniability in the quantum random oracle model: signatures and non-interactive zero-knowledge arguments (NIZKs). As a consequence, for example, it is not possible to delete a signature/NIZK and later provide convincing evidence that it used to exist. Notably, our results utilize uniquely quantum phenomena to bypass the celebrated result of Pass (CRYPTO, 2003) showing that deniable NIZKs are impossible even in the random oracle model.

Quantum Physics,Cryptography and Security
From Personal Data to Digital Legacy: Exploring Conflicts in the Sharing, Security and Privacy of Post-mortem Data

Jack Holt,James Nicholson,Jan David Smeddinck

DOI: https://doi.org/10.1145/3442381.3450030

2021-04-16

Abstract:As digital technologies become more prevalent there is a growing awareness of the importance of good security and privacy practices. The tools and techniques used to achieve this are typically designed with the living user in mind, with little consideration of how they should or will perform after the user has died. We report on two workshops carried out with users of password managers to explore their views on the post-mortem sharing, security and privacy of a range of common digital assets. We discuss a post-mortem privacy paradox where users recognise value in planning for their digital legacy, yet avoid actively doing so. Importantly, our findings highlight a tension between the use of recommended security tools during life and facilitating appropriate post-mortem access to chosen assets. We offer design recommendations to facilitate and encourage digital legacy planning while promoting good security habits during life.

Cryptography and Security,Human-Computer Interaction
Multiauthority Attribute-Based Encryption for Assuring Data Deletion

Jiguo Li,Ruyuan Zhang,Yang Lu,Jinguang Han,Yichen Zhang,Wenzheng Zhang,Xinfeng Dong

DOI: https://doi.org/10.1109/jsyst.2022.3208149

IF: 4.802

2022-01-01

IEEE Systems Journal

Abstract:In order to alleviate key escrow issue, the notion of multiauthority attribute-based encryption (MA-ABE) was presented, which was widely applied in cloud storage environment. In data sharing environment, secure data deletion is very crucial and challenging issue. Hence, in this article, we concentrate on verification of data deletion operation, i.e., assuring data deletion. To solve this problem, we put forward a system model, formal definition and security model of MA-ABE for assuring data deletion. Furthermore, we design a MA-ABE scheme for assuring data deletion, which is more practicable than the single authority ABE scheme. The designed scheme not only overcomes key escrow issue, but also resists collusion attack between malicious user and unauthorized user. In addition, our scheme utilizes merkle hash tree to obtain verifiable data deletion. Based on decisional bilinear Diffie-Hellman (DBDH) assumption, the scheme is proven to be secure under the selective-policy model. The experimental result indicates that the designed scheme is efficient for practical application.

computer science, information systems,telecommunications,engineering, electrical & electronic,operations research & management science
Vacuum: An Efficient and Assured Deletion Scheme for User Sensitive Data on Mobile Devices

Li Yang,Cheng Li,Teng Wei,Fengwei Zhang,Jianfeng Ma,Naixue Xiong

DOI: https://doi.org/10.1109/jiot.2021.3119514

IF: 10.6

2021-01-01

IEEE Internet of Things Journal

Abstract:Embedded devices (e.g., mobile phones, smart watches, etc.) store a large amount of sensitive information. However, Android-based devices may leak a lot of user information if unsafe data deletion. Therefo re, research on secure data deletion for embedded devices has become a practical and urgent issue. In this article, we study the logic structure, operation characteristics, and data management mechanisms of flash memory. Then, we propose a novel method Vacuum that uses a user-space file system and can provide fine-grained file deletion guarantees. Our approach encrypts files on an insecure medium with a unique key that can later be discarded to cryptographically render the data irrecoverable. Additionally, we use TrustZone as a secure key vault, and a garbage collection mechanism is introduced to purge the memory. Finally, we carried out experiments on the Android system, and the results showed that the solution is efficient and can meet the needs of real applications.

computer science, information systems,telecommunications,engineering, electrical & electronic
Formalizing Data Deletion in the Context of the Right to be Forgotten

Sanjam Garg,Shafi Goldwasser,Prashant Nalini Vasudevan

DOI: https://doi.org/10.48550/arXiv.2002.10635

2020-02-25

Abstract:The right of an individual to request the deletion of their personal data by an entity that might be storing it -- referred to as the right to be forgotten -- has been explicitly recognized, legislated, and exercised in several jurisdictions across the world, including the European Union, Argentina, and California. However, much of the discussion surrounding this right offers only an intuitive notion of what it means for it to be fulfilled -- of what it means for such personal data to be deleted. In this work, we provide a formal definitional framework for the right to be forgotten using tools and paradigms from cryptography. In particular, we provide a precise definition of what could be (or should be) expected from an entity that collects individuals' data when a request is made of it to delete some of this data. Our framework captures several, though not all, relevant aspects of typical systems involved in data processing. While it cannot be viewed as expressing the statements of current laws (especially since these are rather vague in this respect), our work offers technically precise definitions that represent possibilities for what the law could reasonably expect, and alternatives for what future versions of the law could explicitly require. Finally, with the goal of demonstrating the applicability of our framework and definitions, we consider various natural and simple scenarios where the right to be forgotten comes up. For each of these scenarios, we highlight the pitfalls that arise even in genuine attempts at implementing systems offering deletion guarantees, and also describe technological solutions that provably satisfy our definitions. These solutions bring together techniques built by various communities.

Cryptography and Security
Deceptive Deletions for Protecting Withdrawn Posts on Social Platforms

Mohsen Minaei,S Chandra Mouli,Mainack Mondal,Bruno Ribeiro,Aniket Kate

DOI: https://doi.org/10.48550/arXiv.2005.14113

2020-05-28

Social and Information Networks

Abstract:Over-sharing poorly-worded thoughts and personal information is prevalent on online social platforms. In many of these cases, users regret posting such content. To retrospectively rectify these errors in users' sharing decisions, most platforms offer (deletion) mechanisms to withdraw the content, and social media users often utilize them. Ironically and perhaps unfortunately, these deletions make users more susceptible to privacy violations by malicious actors who specifically hunt post deletions at large scale. The reason for such hunting is simple: deleting a post acts as a powerful signal that the post might be damaging to its owner. Today, multiple archival services are already scanning social media for these deleted posts. Moreover, as we demonstrate in this work, powerful machine learning models can detect damaging deletions at scale. Towards restraining such a global adversary against users' right to be forgotten, we introduce Deceptive Deletion, a decoy mechanism that minimizes the adversarial advantage. Our mechanism injects decoy deletions, hence creating a two-player minmax game between an adversary that seeks to classify damaging content among the deleted posts and a challenger that employs decoy deletions to masquerade real damaging deletions. We formalize the Deceptive Game between the two players, determine conditions under which either the adversary or the challenger provably wins the game, and discuss the scenarios in-between these two extremes. We apply the Deceptive Deletion mechanism to a real-world task on Twitter: hiding damaging tweet deletions. We show that a powerful global adversary can be beaten by a powerful challenger, raising the bar significantly and giving a glimmer of hope in the ability to be really forgotten on social platforms.
CPSD: A Data Security Deletion Algorithm Based on Copyback Command

Rongzhen Zhu,Yuchen Wang,Pengpeng Bai,Zhiming Liang,Weiguo Wu,Lei Tang

DOI: https://doi.org/10.1109/icaica54878.2022.9844604

2022-01-01

Abstract:Data secure deletion operation in storage media is an important function of data security management. The internal physical properties of SSDs are different from hard disks, and data secure deletion of disks can not apply to SSDs directly. Copyback operation is used to improve the data migration performance of SSDs but is rarely used due to error accumulation issue. We propose a data securely deletion algorithm based on copyback operation, which improves the efficiency of data secure deletion without affecting the reliability of data. First, this paper proves that the data secure delete operation takes a long time on the channel bus, increasing the I/O overhead, and reducing the performance of the SSDs. Secondly, this paper designs an efficient data deletion algorithm, which can process read requests quickly. The experimental results show that the proposed algorithm can reduce the response time of read requests by 21% and the response time of delete requests by 18.7% over the existing algorithm.
ET-DMD: An Error-Tolerant Scheme to Detect Malicious File Deletion on Distributed Storage

Jian Mao,Yan Zhang,Xiandong Xu,Jianwei Liu,Tao Wei

DOI: https://doi.org/10.1109/iNCoS.2012.67

2012-01-01

Abstract:Distributed storage is a scheme to store data in networked storage services, which is the basis of popular cloud storage solutions. Although this scheme has huge benefits in reducing maintenance and operation cost, it has several security concerns. Among them, malicious file deletion by the storage providers is a top concern. In this paper, we develop a novel error-tolerant solution, ET-DME, to effectively detect malicious file deletion behaviors in distributed storage services. Our approach prevents malicious servers from forging evidence to bypass data auditing test. In addition, our approach does not limit the number of challenges made by the client. Our approach also has low computation and communication overhead.
Forgetting the Forgotten with Letheia, Concealing Content Deletion from Persistent Observers

Mohsen Minaei,Mainack Mondal,Patrick Loiseau,Krishna Gummadi,Aniket Kate

DOI: https://doi.org/10.48550/arXiv.1710.11271

2017-10-30

Cryptography and Security

Abstract:Most social platforms offer mechanisms allowing users to delete their posts, and a significant fraction of users exercise this right to be forgotten. However, ironically, users' attempt to reduce attention to sensitive posts via deletion, in practice, attracts unwanted attention from stalkers specifically to those posts. Thus, deletions may leave users more vulnerable to attacks on their privacy in general. Users hoping to make their posts forgotten face a "damned if I do, damned if I don't" dilemma. Many are shifting towards ephemeral social platform like Snapchat, which will deprive us of important user-data archival. In the form of intermittent withdrawals, we present, Lethe, a novel solution to this problem of forgetting the forgotten. If the next-generation social platforms are willing to give up the uninterrupted availability of non-deleted posts by a very small fraction, Lethe provides privacy to the deleted posts over long durations. In presence of Lethe, an adversarial observer becomes unsure if some posts are permanently deleted or just temporarily withdrawn by Lethe; at the same time, the adversarial observer is overwhelmed by a large number of falsely flagged undeleted posts. To demonstrate the feasibility and performance of Lethe, we analyze large-scale real data about users' deletion over Twitter and thoroughly investigate how to choose time duration distributions for alternating between temporary withdrawals and resurrections of non-deleted posts. We find a favorable trade-off between privacy, availability and adversarial overhead in different settings for users exercising their right to delete. We show that, even against an ultimate adversary with an uninterrupted access to the entire platform, Lethe offers deletion privacy for up to 3 months from the time of deletion, while maintaining content availability as high as 95% and keeping the adversarial precision to 20%.

Ghosts of Deletions Past: New Secure Deletion Challenges and Solutions

Secure Deduplication of Encrypted Data Without Additional Independent Servers.

Making space for the future: the importance of deletion for librarianship and information science and the information society

ExD: Explainable Deletion

Empirical Understanding of Deletion Privacy: Experiences, Expectations, and Measures

Research on Secure Destruction of Digital Information

Investigation of Data Deletion Vulnerabilities in NAND Flash Memory Based Storage

Deletion-Compliance in the Absence of Privacy

Secret Sharing with Certified Deletion

Accelerating Secure and Verifiable Data Deletion in Cloud Storage via SGX and Blockchain

Cryptography with Certified Deletion

Why Data Deletion Fails? A Study on Deletion Flaws and Data Remanence in Android Systems.

How to Delete Without a Trace: Certified Deniability in a Quantum World

From Personal Data to Digital Legacy: Exploring Conflicts in the Sharing, Security and Privacy of Post-mortem Data

Multiauthority Attribute-Based Encryption for Assuring Data Deletion

Vacuum: An Efficient and Assured Deletion Scheme for User Sensitive Data on Mobile Devices

Formalizing Data Deletion in the Context of the Right to be Forgotten

Deceptive Deletions for Protecting Withdrawn Posts on Social Platforms

CPSD: A Data Security Deletion Algorithm Based on Copyback Command

ET-DMD: An Error-Tolerant Scheme to Detect Malicious File Deletion on Distributed Storage

Forgetting the Forgotten with Letheia, Concealing Content Deletion from Persistent Observers