Write once read many (WORM) describes a data storage device in which information, once written, cannot be modified. This write protection affords the assurance that the data cannot be tampered with once it is written to the device.
On ordinary (non-WORM) data storage devices, the number of times data can be modified is limited only by the lifespan of the device, as modification involves physical changes that may cause wear to the device. The “read many” aspect is unremarkable, as modern storage devices permit unlimited reading of data once written.
WORM drives preceded the invention of the CD-R and DVD-R. An example was the IBM 3363. These drives typically used a 12 in (30 cm) disk in a cartridge, with an ablative optical layer that could be written to only once, and were often used in places like libraries that needed to store large amounts of data. Interfaces to connect these to PCs also existed.
Punched cards and paper tape are obsolete WORM media. Although any unpunched area of the medium could be punched after the first write of the medium, doing so was virtually never useful. Read-only memory (ROM) is also a WORM medium. Such memory may contain the instructions to a computer to read the operating system from another storage device such as a hard disk. The non-technical end-user, however, cannot write the ROM even once, but considers it part of the unchangeable computing platform.
WORM was utilized for Broker-dealer records within the Financial Industry Regulatory Authority and the U.S. Securities and Exchange Commission.
Current WORM Drives
The CD-R and DVD-R optical disks for computers are common WORM devices. On these disks, no region of the disk can be recorded a second time. However, these disks often use a file system based on ISO 9660 that permits additional files, and even revised versions of a file by the same name, to be recorded in a different region of the disk. To the user of the disk, the disk appears to allow additions and revisions until all the disk space is used.
The SD card spec allows for multiple forms of write-protection. The most common form, only available when using a full-size SD card, provides a “mechanical write protect switch” which allows the user to advise the host computer that the user wants the device to be treated as read-only. This does not protect the data on the card if the host is compromised. Another option, the “card internal write protect”, rarely implemented if at all, makes it the responsibility of firmware on the internal microprocessor to not allow rewrites of any block of the memory.
Multiple vendors beginning in the early 2000s developed Magnetic WORM devices. These archival grade storage devices utilize a variation of RAID and magnetic storage technologies to secure data from unauthorized alteration or modification at both the hardware and software levels. As the cost of magnetic (and solid state) storage has decreased, so has the cost for these archival storage technologies. These technologies are almost always integrated directly to a content/document management system that manages retention schedules and access controls, along with document level history.
There are multiple vendors providing Magnetic Storage technologies including (but not limited to) NetApp, EMC Centera, KOM Networks, and others. In 2013, GreenTec-USA, Inc. developed WORM hard disk drives in capacities of 3 TB and greater. Prevention of rewrite is done at the physical disk level and cannot be modified or overridden by the attached computer.