NIST CFTT: Testing Disk Imaging Tools

Published

August 1, 2002

Author(s)

James R. Lyle

Abstract

There is a critical need in the law enforcement community to ensure the reliability of computer forensic tools. A capability is required to ensure that forensic software tools consistently produce accurate and objective test results. The goal of the Computer Forensic Tool Testing (CFTT) project at the National Institute of Standards and Technology (NIST) is to establish a methodology for testing computer forensic software tools. A methodology consisting of tool requirements specifications, test procedures, test criteria, test sets, and test hardware was developed.This paper reports on the initial CFTT work at NIST as applied to disk imaging tools. A brief overview of the testing process developed at NIST is presented followed by a discussion of the lessons learned testing the developed methodology on two disk imaging tools, dd and SafeBack.

Citation

World Wide Web-Internet and Web Information Systems

Pub Type

Journals

Keywords

computer forensics, hard disk drive imaging

Citation

Lyle, J. (2002), NIST CFTT: Testing Disk Imaging Tools, World Wide Web-Internet and Web Information Systems (Accessed May 15, 2026)

Additional citation formats