CFTT Project (Computer Forensics Tool Testing)

Overview: The Computer Forensics Tools Verification project

provides a measure of assurance that the tools used in the
investigations of computer-related crimes produce valid results.

Industry Need Addressed: There are approximately 150

different automated tools routinely used by law enforcement
organizations to assist in the investigation of crimes involving
computers. These tools are used to create critical evidence used
in criminal cases, yet there are no standards or recognized tests
by which to judge the validity of results produced by these tools.

Tool test process

After a category specification has been developed and a tool selected, the test process is
as follows:

1. Acquires the tool to be tested.

2. Reviews the tool documentation.
3. Selects relevant test cases depending on features supported by the tool.
4. Develops test strategy.
5. Executes tests
6. Produces test report.
7. Steering Committee reviews test report.
8. Vendor reviews test report.
9. Posts test report to web.

Contact Information
James Lyle, Project Leader

100 Bureau Drive, Stop 8970

Gaithersburg, MD 20899-8970 USA

E-mail cftt@nist.gov

Phone 301-975-3270

Fax 301-948-6213

NOTE: Project already run by NIST

www.cftt.nist.gov