To respond to various computer security breaches and perform a proper forensics

Question

To respond to various computer security breaches and perform a proper forensics investigation, it is important to ensure that tried and true tools and software are utilized. Tool testing provides a confirmation that the tool or software that you are using to perform a forensic investigation is performing the actions that you intend and nothing more. The U.S. National Institute of Standards and Technology (NIST) has a rigorous testing program for computer forensic tools and equipment.

You can review and learn more about the NIST Tool Testing Program by visiting:

http://www.cftt.nist.gov

For this assignment, you are asked to prepare a written report that includes the following three sections: Provide an overview of the NIST Computer Forensic Tool Testing program and its usefulness to computer forensic investigators.

Describe in detail the work that NIST has done in testing “disk imaging” and “deleted file recovery” tools.

Describe the significance and importance of the various computer forensics offerings from NIST as shown on this site:

http://www.nist.gov/itl/ssd/computerforensics.cfm

Your report should be two to three pages.

Explanation / Answer

NIST Computer forensic program for computer tool testing which is a best way to test the tools in a procedure and these things like forensic testing include imaging devices and extracting informantion from cell. Phones

The. Major benifits or useses of these forensic computer tool testing are as follows:

1.when you use a tested tool we will actually get to know ehat exactly the capabilities of that tool and we will estimate the expected behaviour

2.if the tool has any limitations then you can adjust your work accordingly like by changing the tool or by doing any improvisations to improve existing tool performance etc...

3 . you have a head start on validating the tool

Disk imaging and deleted file recovery tools

Disk imaging is the process of making a copy or partition from the hard disk and writing it to a image file or another hard disk

Some example disk imaging tools are as follows

1.altiria deployment solution 6.1

2.symantec ghost solutions suit

The NIST has done testing on this as follows

To use these tools tge testing is like first they deployed a image from source to destination then the main part comes like to test the functionalities

Imaging speed, ease of use and hardware that supported etc they will test

Then we will test by comparing product features such as user data migration, multi package deployment and software package deployment

When all. These things works. Properly then. Only the tool can be treated as a usable. One

3.the main significance and importance of the various computer forensics offerings from NIST are

They provide unanimous test cases for each testing tool

Different and unique testing tools with unique functionalities

Deployment of general tools and

Ptoviding test ptocedures, test cases based on specifications

So many things like test hardware, test sets which will. Helps to get more offerings

Related Questions

Navigate

• Browse (All)
• Browse T
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.