HyperAIHyperAI

Command Palette

Search for a command to run...

24 days ago
Security

Retention-aware system turns storage chips into cybersecurity shield

FIU cybersecurity researcher Weidong Zhu and his team at the University of Florida have developed a novel system that transforms solid-state drive (SSD) storage chips into active cybersecurity shields. Published in the Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security, the technology extends the recoverable data window up to 126 days, offering a critical defense against ransomware and data deletion attacks even after a computer is compromised. Current SSDs operate with a blind approach to data management known as garbage collection. When a user deletes a file or when malware encrypts it, the data does not vanish immediately. Instead, it enters a transitional state often described as an in-between zone where files are fragmented and renamed to save space, yet remain physically present on the chip until the hardware actively overwrites them. The problem lies in the SSD's efficiency-first logic. Traditional controllers indiscriminately clear this in-between zone based on fragmentation and space availability, without regard for how recently files were deleted. Consequently, in the event of a cyberattack, the most recently deleted or encrypted files—the ones a victim urgently needs to recover—are often the first to be permanently erased, while older, unimportant data persists longer. Zhu's innovation addresses this vulnerability by introducing retention awareness to the SSD controller. By sequencing deleted data chronologically upon entry, the drive gains the ability to track the age of files in the transitional zone. The new garbage collection algorithm automatically prioritizes the oldest deleted data for permanent erasure, ensuring that recently deleted files remain protected for as long as possible. This simple rule change significantly increases the time window available for recovery after an attack. According to Zhu, an assistant professor at FIU's Knight Foundation School of Computing & Information Sciences and a member of the Center for Integrated Security, Privacy, and Trustworthy AI (CIERTA), this approach improves the data protection window by at least 60 percent. Crucially, the system achieves this enhanced security with minimal performance overhead, solving the historical dilemma where defensive measures typically slowed down storage devices. The researchers demonstrated that the hardware can now serve dual roles as both high-performance storage and an independent security vault, similar to a bank vault with its own lock and guard that remains secure even if the bank itself is breached. The study confirms that storage devices can function as the last line of defense against sophisticated hackers. Zhu notes that while the concept of hardware-level security has long been theoretical, the practical application of making SSDs defense-ready has finally been achieved. The team is currently engaging with industry leaders to scale the implementation of this retention-aware system across the storage market. As digital threats become more ruthless, this breakthrough offers a new paradigm where the computer's own hardware actively preserves vital data against deletion and encryption attacks.

Related Links

Retention-aware system turns storage chips into cybersecurity shield | Trending Stories | HyperAI