A survey of digital forensics tools for database extraction

Çankaya, Ebru Çelikel; Kupka, Brad

doi:10.1109/ftc.2016.7821727

Cited by 10 publications

(4 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Other surveys related to this article, but not found by the search strings of the SLR, focus on digital forensics tools to extract data from databases or to assist in the recovery of database [Cankaya and Kupka 2016], the last ten years of research related to forensic analysis of relational and NoSQL databases [Chopade and Pachghare 2019] and the evolution of the digital forensic (its origins, current position, and future directions) [Damshenas et al 2014]. However, to the best of our knowledge, none of this work broadly focuses on the intersection between the database and digital forensic areas.…”

Section: Related Workmentioning

confidence: 99%

Exploring the Intersection between Databases and Digital Forensics

Seufitelli

Brandão²,

Moro³

2022

jidm

View full text Add to dashboard Cite

Digital forensics has attracted attention from assorted researchers, who primarily work on predicting and solving digital hacks and crimes. In turn, the number and types of digital crimes have increased considerably, mainly due to the growing use of digital media to perform daily personal and professional tasks. Like most computer-related activities, data is at the center of such hacks and crimes. Hence, this work presents a systematic literature review of publications at the intersection between Digital Forensics and Databases. We discuss problems and trends of two main categories: Data Building and Database Management Systems. Overall, this research opens the doors for the communication between databases and an area with several exciting and concrete challenges, with great potential for social, economic, and technical-scientific contributions.

show abstract

Section: Related Workmentioning

confidence: 99%

Exploring the Intersection between Databases and Digital Forensics

Seufitelli

Brandão²,

Moro³

2022

jidm

View full text Add to dashboard Cite

show abstract

“…A list of digital forensics tools for extracting, recovering, analyzing, and documenting data from databases was provided by [49]. A model proposed by [50] was used to assess the integrity of live databases by recognizing and reporting log tampering based on the forensic analysis of database storage and the detection of inconsistencies between database logs and physical storage states.…”

Section: Database Forensic Models Overviewmentioning

confidence: 99%

Database Forensic Investigation Process Models: A Review

et al. 2020

View full text Add to dashboard Cite

Database Forensic Investigation (DBFI) involves the identification, collection, preservation, reconstruction, analysis, and reporting of database incidents. However, it is a heterogeneous, complex, and ambiguous field due to the variety and multidimensional nature of database systems. A small number of DBFI process models have been proposed to solve specific database scenarios using different investigation processes, concepts, activities, and tasks as surveyed in this paper. Specifically, we reviewed 40 proposed DBFI process models for RDBMS in the literature to offer up-to-date and comprehensive background knowledge on existing DBFI process model research, their associated challenges, issues for newcomers, and potential solutions for addressing such issues. This paper highlights three common limitations of the DBFI domain, which are: 1) redundant and irrelevant investigation processes; 2) redundant and irrelevant investigation concepts and terminologies; and 3) a lack of unified models to manage, share, and reuse DBFI knowledge. Also, this paper suggests three solutions for the discovered limitations, which are: 1) propose generic DBFI process/model for the DBFI field; 2) develop a semantic metamodeling language to structure, manage, organize, share, and reuse DBFI knowledge; and 3) develop a repository to store and retrieve DBFI field knowledge. INDEX TERMS Database forensic, digital forensic, investigation process model.

show abstract

“…Researchers have already worked for tamper detection in relational databases like Oracle, MySQL, and SQL Server, etc. Different tools are available for forensics purpose but each tool has its own limitations [4]. These tools are designed for specific database, considering its internal architecture and most of these tools are available for relational databases.…”

Section: Introductionmentioning

confidence: 99%

Data Tamper Detection from NoSQL Database in Forensic Environment

Chopade

Pachghare

2021

JCSANDM

View full text Add to dashboard Cite

The growth of service sector is increasing the usage of digital applications worldwide. These digital applications are making use of database to store the sensitive and secret information. As the database has distributed over the internet, cybercrime attackers may tamper the database to attack on such sensitive and confidential information. In such scenario, maintaining the integrity of database is a big challenge. Database tampering will change the database state by any data manipulation operation like insert, update or delete. Tamper detection techniques are useful for the detection of such data tampering which play an important role in database forensic investigation process. Use of NoSQL database has been attracted by big data requirements. Previous research work has limited to tamper detection in relational database and very less work has been found in NoSQL database. So there is a need to propose a mechanism to detect the tampering of NoSQL database systems. Whereas this article proposes an idea of tamper detection in NoSQL database such as MongoDB and Cassandra, which are widely used document-oriented and column-based NoSQL database respectively. This research work has proposed tamper detection technique which works in forensic environment to give more relevant outcome on data tampering and distinguish between suspicious and genuine tampering.

show abstract

A survey of digital forensics tools for database extraction

Cited by 10 publications

References 0 publications

Exploring the Intersection between Databases and Digital Forensics

Exploring the Intersection between Databases and Digital Forensics

Database Forensic Investigation Process Models: A Review

Data Tamper Detection from NoSQL Database in Forensic Environment

Contact Info

Product

Resources

About