skip navigation

Add your conference to our Justice Events calendar


NCJRS Celebrates National Library Week April 12-18

National Library Week

Started in 1958, National Library Week is a nationwide observance celebrated by all types of libraries - including the NCJRS Virtual Library. NCJRS invites you to explore the breadth and scope of the NCJRS Virtual Library collection and services. With more than 220,000 collection documents and 60,000 online resources, including all known Office of Justice Programs works, it is one of the world’s largest criminal justice special collections.

We encourage your Feedback. Tell us how you use the NCJRS Virtual Library and Abstracts Database, how you access the collection, and any ways we can improve our services.

NCJRS Abstract

The document referenced below is part of the NCJRS Library collection.
To conduct further searches of the collection, visit the NCJRS Abstracts Database.

How to Obtain Documents
NCJ Number: NCJ 220222   Add to Shopping cart   Find in a Library
Title: ACES Software Write Block Tool Test Report: Writeblocker Windows XP V6.10.0
  Document URL: PDF 
Corporate Author: National Institute of Standards and Technology (NIST)
United States of America
Date Published: 01/2008
Page Count: 156
  Annotation: This document reports test results for Writeblocker XP, Version 6.10.0, which is designed to block all attempts to write to a protected drive by commands issued from common operating system tools and from the widely used forensic tools FTK and EnCase.
Abstract: Test results show that the tool failed to block some test commands from the protected categories that were sent to protected drives, but no changes to the protected drives were observed. The tool did not alter or block test commands from any nonprotected category that were sent to protected or unprotected drives. The tool did not alter or block any test commands sent to unprotected drives. Writeblocker XP V6.10.0 consists of two kernel model device drivers NTWBFS and NTWBPM, as well as a user mode GUI control application. The NTWBFS driver is a file system filter driver that filters file system calls, and the NTWBPM driver is a physical device filter that filters hardware I/O requests. Of the two kernel model drivers, the NTWBPM driver was tested directly by test cases SWB-01 through SWB-24. Test cases SWB-25 through SWB-30 tested the ability of both components, working together, to protect a hard drive. The methodology and results of each test case are presented in this report. All testing was conducted in accordance with the SCES Software Write Block Tool Specification & Test Plan Version 1.0, which can be found on the Web site of the Computer Forensics Tool Testing program. Data tables are provided for each test.
Main Term(s): Computer crime prevention measures
Index Term(s): Data security ; Computer privacy and security ; Computer software ; NIJ grant-related documents
Sponsoring Agency: National Institute of Justice (NIJ)
US Department of Justice
Office of Justice Programs
United States of America
Grant Number: 2003-IJ-R-029
Sale Source: National Institute of Justice/NCJRS
Box 6000
Rockville, MD 20849
United States of America
Type: Test/Measurement
Country: United States of America
Language: English
Note: NIJ Special Report; downloaded August 26, 2008.
  To cite this abstract, use the following link:

* A link to the full-text document is provided whenever possible. For documents not available online, a link to the publisher's web site is provided.