Evaluating A Selection of Tools for Extraction of Forensic Data: Disk ...

interviews and discussions with law enforcements, CFTT program and existing
literature review.
Identify generic
requirements
Translate generic
requirements to
testable assertions
Create test plan that
tests assertions and
technical variations
Implement the test
plan
Analyze test results
Notify the vendor
about the test result
47
Identify relevant
technical
variations for
testing
Figure 3.2. Methodology of disk imaging tools evaluation from Byers & Shahmehri (2009)
Technical variations are various environments where a disk imaging tool can be
applied. These variations will affect how the tool behaves during the evaluation and
the variations are necessary to be identified at the beginning. Each single variation is
analysed. It is important to identify any further implications of other potential
variation or evaluate whether it is in conflict with other variations. In the following
stage, a list of high level requirements is converted to a set of testable assertions. Once
technical variations and test assertions are defined, a test plan is built with a list of
associated technical variations. Test cases are then created under a group of technical
variations. Detailed setup procedures, testing environment, software required are
outlined in the test plan. A generic procedure is also extracted from all common test
cases. The plan is then executed and a test report is generated. Test results and