Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

The Contribution of Tool Testing to the Challenge of Responding to an IT Adversary

Author(s)

James R. Lyle

Abstract

The investigator is being presented with more data and more types of data to analyze. The investigator cannot work without tools. Tools are needed to acquire and analyze the data and solve the case. If the accuracy of any tools is successfully challenged in a court of law, then any results based on the tools can be suppressed and not presented. Even if an investigation is not going to any formal proceeding, the investigator wants to know the limitations of any tools used in an investigation. This can best be accomplished by an independent assessment of the tools. This paper describes the Computer Forensics Tool Testing (CFTT) project at the National Institute of Standards and Technology (NIST) in the United States. Currently, the CFTT project is developing tool specifications, test plans, test procedures, and test sets. The results provide the information necessary for toolmakers to improve tools, for users to make informed choices about acquiring and using computer forensics tools, and for interested parties to understand the tools capabilities. Our approach for testing computer forensic tools is based on well-recognized international methodologies for conformance testing and quality testing.
Proceedings Title
IMF 2006 International Conference on IT-Incident Management & IT-Forensics | | | IMF
Conference Dates
October 18-19, 2006
Conference Location
Stuttgart, GE
Conference Title
International Conference on IT-Incident Management & IT-Forensics

Keywords

Computer Forensics, Computer Security, Testing, Homeland Security

Citation

Lyle, J. (1970), The Contribution of Tool Testing to the Challenge of Responding to an IT Adversary, IMF 2006 International Conference on IT-Incident Management & IT-Forensics | | | IMF, Stuttgart, GE (Accessed May 27, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created August 26, 2016, Updated January 27, 2020