Test Results for Mobile Device Acquisition Tool: Paraben Device Seizure 3.1

• NCJ Number: 228221
• Date Published: September 2009
• Length: 251 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Test/Measurement

Annotation

Results are presented from testing Paraben's Device Seizure, a mobile device data acquisition tool under the Computer Forensics Tool Testing (CFTT) program.

Abstract

With the exception of eight test cases, the Paraben Device Seizure tested tool acquired all supported data objects completely and accurately from the selected test mobile devices (i.e., LG VX5400, LG VX6100, MOTO V710, Samsung SCH-u410, Samsung SCH-U740, Samsung SPH-a660). Highlights of exceptions to this overall result, among the various test cases include: 1) meta data (i.e., status flags [Read, Unread], phone number [sender, receipt] were incorrectly reported and 2) physical acquisitions (i.e., memory dump, GUID properties) ended in errors. The Computer Forensics Tool Testing (CFTT) program is a joint project of the United States Department of Justice, National Institute of Justice and the National Institute of Standards and Technology (NIST) Office of Law Enforcement Standards, and Information Technology Laboratory. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and others that the tools used in computer forensic investigations provide accurate results. This requires the development of specifications and test methods for computer forensic tools and subsequent testing of tools against specifications. This report presents the results from testing Paraben's Device Seizure, version 3.1, against the Non-GSM Mobile Device and Associated Media Tool Test Assertions and Test Plan Version 1.1. Tables