ABSTRACT

Test Results for Disk Imaging Tools: dd GNU fileutils 4.0.36, Provided with Red Hat Linux 7.1   [open pdf - 411KB]

From the Introduction: "The Computer Forensics Tool Testing (CFTT) project is the joint effort of the National Institute of Justice, the National Institute of Standards and Technology (NIST), as well as, the Department of Defense, the Technical Support Working Group, and other related agencies. The objective of the CFTT project is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigations provide accurate results. Accomplishing this requires first, the development of specifications and test methods for computer forensics tools, and then subsequent testing of specific tools against those specifications. [...] This document reports the results from testing one commonly used disk imaging tool, the dd GNU fileutils 4.0.36 provided with Red Hat Linux 7.1, against the Disk Imaging Tool Specification, developed by the CFTT staff. [...] This specification identifies the top-level disk imaging tool requirements as: [1] The tool shall make a bit-stream duplicate or an image of an original disk or partition; [2] The tool shall not alter the original disk; [3] The tool shall log I/O errors; [and 4] The tool's documentation shall be correct[.]"

Author:
Publisher:
Date:
2002-08
Copyright:
Public Domain
Retrieved From:
U.S. Department of Homeland Security: https://www.dhs.gov/
Format:
pdf
Media Type:
application/pdf
URL:
Help with citations