NIST tests Software Write Blockers

NIST just released the test reports for two software write blockers by Booz, Allen, Hamilton. They tested version 5.02.00 for Microsoft Windows 2000 and version 6.10.00 for Microsoft Windows XP. The tests identified anomalies in both versions.
Both reports state in unison:
The tool blocked all SCSI-2 commands from the WRITE category but failed to block most of the SCSI-3 commands in that category. The tool also failed to block four internal IRP functions from the WRITE category. The tool did not block any of the commands from the VENDOR_SPECIFIC and UNDEFINED categories.

Archives

Imprint

This blog is a project of:
Andreas Schuster
Im Äuelchen 45
D-53177 Bonn
impressum@forensikblog.de

Copyright © 2005-2012 by
Andreas Schuster
All rights reserved.
Powered by Movable Type 5.12