skip navigation

CrimeSolutions.gov

Add your conference to our Justice Events calendar

PUBLICATIONS

NCJRS Abstract

The document referenced below is part of the NCJRS Library collection.
To conduct further searches of the collection, visit the NCJRS Abstracts Database.

How to Obtain Documents
 
NCJ Number: NCJ 200032   Add to Shopping cart   Find in a Library
Title: Test Results for Disk Imaging Tools: SafeBack 2.18
Corporate Author: National Institute of Standards and Technology (NIST)
United States of America
Date Published: 06/2003
Page Count: 221
Sponsoring Agency: National Institute of Justice
US Department of Justice
Office of Justice Programs
United States of America
Contract Number: 94-IJ-R-004
Sale Source: National Institute of Justice/NCJRS
Box 6000
Rockville, MD 20849
United States of America

NCJRS Photocopy Services
Box 6000
Rockville, MD 20849-6000
United States of America
Document: PDF 
Type: Report (Technical) ; Test/Measurement
Language: English
Country: United States of America
Annotation: As part of the Computer Forensics Tool Testing (CFTT) project, this report presents the results of testing a particular software tool (SafeBack 2.18) that copies or images computer hard-disk drives.
Abstract: The objective of the CFTT project is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. This requires the development of specifications and test methods for computer forensics tools and subsequent testing of specific tools against those specifications. The test results are intended to provide information that is necessary for developers to improve tools, users to make informed choices, and the legal community and others to understand the tools' capabilities. The testing of SafeBack 2.18, a disk imaging tool, assessed the tool's ability to make a bit-stream duplicate or an image of an original disk or partition, to not alter the original disk, to log I/O errors, and to make an accurate documentation of the original disk or partition. The testing results found that SafeBack, with two exceptions, copied all the disk sectors accurately and completely in the test cases that were run. The two exceptions are identified and discussed. For all the test cases that were run, SafeBack never altered the original hard drive, and it always identified image files that had been modified. SafeBack always logged I/O errors for the test cases that were conducted. The tool documentation available was the SafeBack Reference Manual, Version 2.0, Second Edition, October 2001. There was no documentation identified for Version 2.18. In some cases, the software behavior was not documented or was ambiguous. Detailed test data are provided.
Main Term(s): Police equipment
Index Term(s): Computer aided operations ; Computer software ; Computer related crime ; Investigative techniques ; Computer aided investigations ; Computer crime investigative Training ; NIJ grant-related documents
Note: Downloaded November 7, 2003.
   
  To cite this abstract, use the following link:
https://www.ncjrs.gov/App/Publications/abstract.aspx?ID=200032

* A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's web site is provided.