skip navigation

Justinfo Subscribe to Stay Informed

Add your conference to our Justice Events calendar


NCJRS Abstract


Subscribe to Stay Informed
Want to be in the know? JUSTINFO is a biweekly e-newsletter containing information about new publications, events, training, funding opportunities, and Web-based resources available from the NCJRS Federal sponsors. Sign up to get JUSTINFO in your inbox.

The document referenced below is part of the NCJRS Library collection.
To conduct further searches of the collection, visit the NCJRS Abstracts Database.

How to Obtain Documents
NCJ Number: NCJ 216300     Find in a Library
Title: Test Results for Hardware Write Block Device: WiebeTech Forensic SATADock (FireWire Interface)
  Document URL: PDF 
Corporate Author: National Institute of Standards and Technology (NIST)
United States of America
Date Published: 12/2006
Page Count: 18
  Annotation: This report presents results from testing the WiebeTech Forensic SATADock write blocker against the Hardware Write Blocker (HWB) Assertions and Test Plan Version 1.0.
Abstract: Four specifications were identified for the WiebeTech Forensic SATADock device: (1) a hardware write block (HWB) device shall not transmit a command to a protected storage device that modifies the data on the storage device; (2) a HWB device shall return the data requested by a read operation; (3) a HWB device shall return without modification any access-significant information requested from the drive; and (4) any error condition reported by the storage device to the HWB device shall be reported to the host. Results indicated that the device met the requirements of all four specifications. First, the WiebeTech Forensic SATADock always blocked any commands that would have changed user or operating system data stored on a protected drive (specification number one). The device also always allowed commands to read the protected drive (specification number two) and always returned access-significant information from the protected drive without modification (specification number three). Finally, on all tests run, the WiebeTech Forensic SATADock write blocker always returned error codes from the protected drive without modification (specification number four). The tests were run in the National Institute of Standards and Technology’s (NIST’s) Computer Forensics Tool Testing (CFTT) lab using one test computer: Freddy. A Data Transit bus protocol was used to monitor and record commands sent from the host to the write blocker. One of two Dell laptop computers was connected to each protocol analyzer to record commands. Support software is identified followed by the test results report key and a detailed description of the test parameters. Tables
Main Term(s): Evaluation criteria ; Equipment evaluation
Index Term(s): Computer hardware systems ; Forensics/Forensic Sciences ; Computer aided investigations
Sponsoring Agency: National Institute of Justice (NIJ)
US Department of Justice
Office of Justice Programs
United States of America
Grant Number: 2003-IJ-R-029
Sale Source: National Institute of Justice/NCJRS
Box 6000
Rockville, MD 20849
United States of America

NCJRS Photocopy Services
Box 6000
Rockville, MD 20849-6000
United States of America
Type: Measurement/Evaluation Device
Country: United States of America
Language: English
Note: NIJ Special Report; downloaded January 31, 2007.
  To cite this abstract, use the following link:

* A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's web site is provided.