skip navigation

Justinfo Subscribe to Stay Informed

Add your conference to our Justice Events calendar


NCJRS Abstract


Subscribe to Stay Informed
Want to be in the know? JUSTINFO is a biweekly e-newsletter containing information about new publications, events, training, funding opportunities, and Web-based resources available from the NCJRS Federal sponsors. Sign up to get JUSTINFO in your inbox.

The document referenced below is part of the NCJRS Library collection.
To conduct further searches of the collection, visit the NCJRS Abstracts Database.

How to Obtain Documents
NCJ Number: NCJ 200032   Add to Shopping cart   Find in a Library
Title: Test Results for Disk Imaging Tools: SafeBack 2.18
  Document URL: PDF 
Corporate Author: National Institute of Standards and Technology (NIST)
United States of America
Date Published: 06/2003
Page Count: 221
  Annotation: As part of the Computer Forensics Tool Testing (CFTT) project, this report presents the results of testing a particular software tool (SafeBack 2.18) that copies or images computer hard-disk drives.
Abstract: The objective of the CFTT project is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. This requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. The test results are intended to provide information that is necessary for developers to improve tools, users to make informed choices, and the legal community and others to understand the tools' capabilities. The testing of SafeBack 2.18, a disk imaging tool, assessed the tool's ability to make a bit-stream duplicate or an image of an original disk or partition, to not alter the original disk, to log I/O errors, and to make an accurate documentation of the original disk or partition. The testing results found that SafeBack, with two exceptions, copied all the disk sectors accurately and completely in the test cases that were run. The two exceptions are identified and discussed. For all the test cases that were run, SafeBack never altered the original hard drive, and it always identified image files that had been modified. SafeBack always logged I/O errors for the test cases that were conducted. The tool documentation available was the SafeBack Reference Manual, Version 2.0, Second Edition, October 2001. There was no documentation identified for Version 2.18. In some cases, the software behavior was not documented or was ambiguous. Detailed test data are provided.
Main Term(s): Police equipment
Index Term(s): Computer aided operations ; Computer software ; Computer related crime ; Investigative techniques ; Computer aided investigations ; Computer crime investigative Training ; NIJ grant-related documents
Sponsoring Agency: National Institute of Justice (NIJ)
US Department of Justice
Office of Justice Programs
United States of America
Contract Number: 94-IJ-R-004
Sale Source: National Institute of Justice/NCJRS
Box 6000
Rockville, MD 20849
United States of America

NCJRS Photocopy Services
Box 6000
Rockville, MD 20849-6000
United States of America
Type: Report (Technical) ; Test/Measurement
Country: United States of America
Language: English
Note: Downloaded November 7, 2003.
  To cite this abstract, use the following link:

* A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's web site is provided.