Delete temporary files for security

Question

I am working on an application that displays data from a database. Now I am working on a set of modules that will generate an HTML page, including text and images, display it in a web browser (built into the program, but actually MSIE), and gives the user the opportunity to print it.

In the destructors of these classes, I have instructions for deleting the created temporary files, since they can contain only official usage information.

Over the weekend, I realized that I must first overwrite the data 0 (or any other bytes), and then delete them.

I heard that some byte files are used when cleaning files and that only one pass may not be good enough, but I can not think of any reason. I did some research and read about Wikipedia, and it seems that one run will work just as well.

Also, will the no-cache meta tag be added to HTML to make sure that MSIE does not copy data to its own cache directory?

Answer 1

There are two programs that I know of that do this on Unix systems. You should check if they are available on Windows, both native and Cygwin, or something like that, or maybe it will be useful for you to learn how they do it.

• srm available at Sourceforge
• shred - GNU coreutils

. . , . . srm manpage shred manpage .

Answer 2

- , (SOx, PCI DSS, HIPAA, , , ), .

, 0 1. SP800-80. , , , , " " - .