On the Completeness of Reconstructed Data for Database Forensics

Adedayo, Oluwasola Mary; Olivier, Martin S.

doi:10.1007/978-3-642-39891-9_14

Cited by 4 publications

(3 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Their main concern lied in the absence of practical tools available for forensic analysts. In a very recent work (Adedayo and Olivier, 2013), the authors aimed at developing practical techniques to exploit the database layer. One of their techniques aims at providing a better reconstruction method for changed data, another method focuses on providing confirmative evidence on data stored in a database.…”

Section: Database Forensicsmentioning

confidence: 99%

Towards a forensic-aware database solution: Using a secured database replication protocol and transaction management for digital investigations

Frühwirt

Kieseberg

Krombholz

et al. 2014

Digital Investigation

View full text Add to dashboard Cite

Section: Database Forensicsmentioning

confidence: 99%

Towards a forensic-aware database solution: Using a secured database replication protocol and transaction management for digital investigations

Frühwirt

Kieseberg

Krombholz

et al. 2014

Digital Investigation

View full text Add to dashboard Cite

“…In addition, a database can serve as a tool to support the forensic analysis of the database itself because it permits the execution of complex queries for information retrieval [14]. An important aspect of database forensics deals with the ability to revert the operations performed on a database so that the information that existed in the database at an earlier time can be reconstructed [1,5,7]. One aspect of database forensics that has not yet been considered deals with the reconstruction of the database schema or metadata.…”

Section: Introductionmentioning

confidence: 99%

“…In earlier work [5,7], we presented an algorithm for reconstructing the data that was present in a database at an earlier time. Several techniques to ensure the completeness of the reconstructed information have also been considered [1]. This paper builds on the previous work by describing techniques for reconstructing the database schema.…”

Section: Introductionmentioning

confidence: 99%

Schema Reconstruction in Database Forensics

Adedayo

Olivier

2014

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Part 2: Forensic TechniquesInternational audienceAlthough considerable research has been conducted in the area of data- base forensics over the past few years, several aspects of database forensics remain to be considered. One of the challenges facing database forensics is that the results of forensic analysis may be inconsistent with the raw data contained in a database because of changes made to the metadata. This paper describes the various types of changes that can be made to a database schema by an attacker and shows how metadata changes can affect query results. Techniques for reconstructing the original database schema are also described

show abstract

Digital Forensics Readiness Framework (DFRF) to Secure Database Systems

Albugmi

2024

Eng. Technol. Appl. Sci. Res.

View full text Add to dashboard Cite

Database systems play a significant role in structuring, organizing, and managing data of organizations. In this regard, the key challenge is how to protect the confidentiality, integrity, and availability of database systems against attacks launched from within and outside an organization. To resolve this challenge, different database security techniques and mechanisms, which generally involve access control, database monitoring, data encryption, database backups, and strong passwords have been proposed. These techniques and mechanisms have been developed for certain purposes but fall short of many industrial expectations. This study used the design science research method to recommend a new Digital Forensic Readiness Framework, named DFRF, to secure database systems. DFRF involves risk assessments, data classification, database firewalls, data encryption, strong password policies, database monitoring and logging, data backups and recovery, incident response plans, forensic readiness, as well as education and awareness. The proposed framework not only identifies threats and responds to them more effectively than existing models, but also helps organizations stay fully compliant with regulatory requirements and improve their security. The design of the suggested framework was compared with existing models, confirming its superiority.

show abstract

On the Completeness of Reconstructed Data for Database Forensics

Cited by 4 publications

References 4 publications

Towards a forensic-aware database solution: Using a secured database replication protocol and transaction management for digital investigations

Towards a forensic-aware database solution: Using a secured database replication protocol and transaction management for digital investigations

Schema Reconstruction in Database Forensics

Digital Forensics Readiness Framework (DFRF) to Secure Database Systems

Contact Info

Product

Resources

About