Test Results for Mobile Device Acquisition Tool: Paraben Device Seizure 2.1

• NCJ Number: 224149
• Date Published: October 2008
• Length: 144 pages
• Grant Number(s): 2003-IJ-R-029
• Agencies: NIJ
• Publication Type: Test/Measurement

Annotation

As part of the Computer Forensics Tool Testing (CFTT) program--whose objective is to provide measurable assurance to practitioners, researchers, and other applicable users that the tools used in computer forensics investigation provide accurate results--this report presents the results of testing Paraben’s Device Seizure, version 2.1 build 3079.29886, a mobile device data acquisition tool.

Abstract

This version of the Paraben Device Seizure performed all acquisition and performance tests on the following mobile devices: the Nokia 6101, T-Mobile SIM, Motorola RAZR V3, and AT&T SIM. The testing and performance of the Paraben Device Seizure was assessed against the GSM Mobile Device and Associated Media Tool Specification and Test Plan Version 1.1. The report’s section on test case selection contains one table that lists the features available in Paraben’s Device Seizure and the linked test case. A second table lists the features not available in Paraben’s Device Seizure. These are creating a SIM access card by means of vendor documentation; the acquisition of mobile device internal memory and a review of generated log files; the performance of a stand-alone mobile device internal memory acquisition and review of the status flags for text messages present on the SIM; and the acquisition of SIM internal memory and review of generated log files. The report’s section on results by test assertion contains a table that summarizes the test results by assertion. For each assertion, the number of test cases that use the given assertion is indicated. Another section of the report describes the testing environment, including the test computers. The report’s concluding section contains the test results report key and the details of each test result. Extensive data tables