Database forensics

  • Authors:
  • Mario A. M. Guimaraes;Richard Austin;Huwida Said

  • Affiliations:
  • Zayed University, United Arab Emirates;Kennesaw State University, Kennesaw, GA;Zayed University, United Arab Emirates

  • Venue:
  • 2010 Information Security Curriculum Development Conference
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

At the user or surface level, most Database Management System (DBMS) are similar. Most databases contain multiple tables, a standardized query language, primary key, foreign key, referential integrity, and metadata. With regard to physical file structures, concurrency mechanisms, security mechanisms, query optimization and datawarehouse techniques, databases may be radically different from each other. Most Forensic tools are too time consuming to be applied to large databases. Meanwhile, database tools such as oracle logminer and auditing features can assist in forensics, but were not created for that purpose. Many of these tools alter the database in ways that may complicate the use of their results in a legal proceeding. This paper analyzes the challenges of digital forensics, related literature, topics involved, current options for performing forensics on databases as well as considerations in teaching database forensics.