skip navigation

PUBLICATIONS

Register for Latest Research

Stay Informed
Register with NCJRS to receive NCJRS's biweekly e-newsletter JUSTINFO and additional periodic emails from NCJRS and the NCJRS federal sponsors that highlight the latest research published or sponsored by the Office of Justice Programs.

NCJRS Abstract

The document referenced below is part of the NCJRS Virtual Library collection. To conduct further searches of the collection, visit the Virtual Library. See the Obtain Documents page for direction on how to access resources online, via mail, through interlibrary loans, or in a local library.

 

NCJ Number: 200032 Add to Shopping cart Find in a Library
Title: Test Results for Disk Imaging Tools: SafeBack 2.18
Corporate Author: National Institute of Standards and Technology (NIST)
United States of America
Date Published: June 2003
Page Count: 221
Sponsoring Agency: National Institute of Justice (NIJ)
Washington, DC 20531
National Institute of Justice/NCJRS
Rockville, MD 20849
National Institute of Standards and Technology (NIST)
Gaithersburg, MD 20899-3460
NCJRS Photocopy Services
Rockville, MD 20849-6000
Contract Number: 94-IJ-R-004
Sale Source: National Institute of Justice/NCJRS
Box 6000
Rockville, MD 20849
United States of America

NCJRS Photocopy Services
Box 6000
Rockville, MD 20849-6000
United States of America
Document: PDF
Type: Report (Technical); Test/Measurement
Format: Document (Online)
Language: English
Country: United States of America
Annotation: As part of the Computer Forensics Tool Testing (CFTT) project, this report presents the results of testing a particular software tool (SafeBack 2.18) that copies or images computer hard-disk drives.
Abstract: The objective of the CFTT project is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. This requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. The test results are intended to provide information that is necessary for developers to improve tools, users to make informed choices, and the legal community and others to understand the tools' capabilities. The testing of SafeBack 2.18, a disk imaging tool, assessed the tool's ability to make a bit-stream duplicate or an image of an original disk or partition, to not alter the original disk, to log I/O errors, and to make an accurate documentation of the original disk or partition. The testing results found that SafeBack, with two exceptions, copied all the disk sectors accurately and completely in the test cases that were run. The two exceptions are identified and discussed. For all the test cases that were run, SafeBack never altered the original hard drive, and it always identified image files that had been modified. SafeBack always logged I/O errors for the test cases that were conducted. The tool documentation available was the SafeBack Reference Manual, Version 2.0, Second Edition, October 2001. There was no documentation identified for Version 2.18. In some cases, the software behavior was not documented or was ambiguous. Detailed test data are provided.
Main Term(s): Police equipment
Index Term(s): Computer aided investigations; Computer aided operations; Computer crime investigative Training; Computer related crime; Computer software; Investigative techniques; NIJ grant-related documents
Note: Downloaded November 7, 2003.
To cite this abstract, use the following link:
http://www.ncjrs.gov/App/publications/abstract.aspx?ID=200032

*A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's website is provided. Tell us how you use the NCJRS Library and Abstracts Database - send us your feedback.