WORM (Write Once Read Many) storage cannot be altered or deleted after writing, even by an administrator, which makes it the right tool for audit logs, regulated financial records, and ransomware-resistant backups. But it confuses two different promises - write-prevention (the storage lock) and integrity-proof (a hash chain). Most tamper-proof-log requirements need only the hash chain, which is cheaper and independently verifiable. Here is when to reach for real WORM, the irreversible compliance-mode trap, and the GDPR conflict to design around.
tag: #worm
1 posts