Write Once Read Many
Write Once Read Many
During preparation to some of the certification exams I encountered the term WORM - Write Once Read Many media. Surely I knew at least one example of it - CD-R or DVD-R discs - but the term was used in a way, that CD-R and DVD-R media can not support. For example, log files could be stored on such a media so that attacker is not able to tamper with them (again - CD-R would not fit this use as you can not write logs directly to CD so there always will be a lag between actual logs and what is stored on the CD). And I knew no WORM-type media that would fit such usage, until yesterday, when SanDisk announced their WORM flash memory. I really think this would be useful for forensics purposes and look forward to hearing actual uses of the technology. Hopefully you will really not be able to erase/modify the data through some undocumented feature :)
