NCJ Number
228220
Date Published
September 2009
Length
193 pages
Annotation
Results are presented from testing Cellebrite's UFED 1.1.0.5, a mobile device data acquisition tool under the Computer Forensics Tool Testing (CFTT) program.
Abstract
With the exception of five test cases, the UFED, version 1.1.0.5 acquired all supported data objects completely and accurately from the selected test mobile devices. Highlights of exceptions to this overall result among various test cases include: 1) connectivity disruptions between the mobile device and interface were not adequately presented to the examiners; 2) text messages with a status of UNREAD were altered to READ; and 3) all outgoing messages present in internal memory were not reported. The Computer Forensics Tool Testing (CFTT) program is a joint project of the United States Department of Justice, National Institute of Justice and the National Institute of Standards and Technology (NIST) Office of Law Enforcement Standards, and Information Technology Laboratory. The objective of the CFTT program is to provide measurable assurance to practitioners, researchers, and others that the tools used in computer forensic investigations provide accurate results. This requires the development of specifications and test methods for computer forensic tools and subsequent testing of tools against specifications. This report presents the results from testing Cellebrite's UFED, version 1.1.0.5 against the Non-GSM Mobile Device and Associated Media Tool Test Assertions and Test Plan Version 1.1. Tables
Date Published: September 1, 2009