Test Results for Hardware Write Block Device: WiebeTech Bus Powered Forensic ComboDock (USB Interface)

• NCJ Number: 214065
• Date Published: May 2006
• Length: 19 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Test/Measurement

Annotation

This report presents the results from testing the WiebeTech Bus Powered Forensic ComboDock (FireWire Interface) hardware write block device against the Hardware Write Blocker Assertions and Test Plan Version 1.0, which pertains to efficiency and effectiveness in preventing change in a protected computer storage device without preventing access to information on the protected device.

Abstract

For all test cases run, the device always blocked any commands that would have changed user or operating system data stored on a protected drive. The device also always allowed commands to read the protected drive in all test cases run. Further, the device always returned access-significant information from the protected drive without modification for all test cases. Finally, the device always returned error codes from the protected drive without modification for all test cases. Thus, the testing showed that the WiebeTech Bus Powered Forensic ComboDock (FireWire Interface) hardware write blocker complied with the tool requirements of the Hardware Write Blocker Assertions and Test Plan Version 1.0 for all test cases. In addition to test results, this report provides information on test case selection and the testing environment. The latter addresses the configurations of the three test computers, the protocol analyzer, hard disk drives, and support software. Test data are provided.