Analysis of Connection Information for Database Server Detection

Han, Jisung; Lee, Keun-Gi; Choi, Joonho; Lim, Kyung-Soo; Lee, Sang-Jin

doi:10.1109/csa.2009.5404207

Cited by 2 publications

(2 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Such a prototype aims to improve the security rules of DBMSs by implementing tampering detection and a forensic analysis system designed to determine when tampering(s) occurred and what data were tampered with. Similar to log analysis, Han et al (2009) propose client-based methods for detecting specific databases in target companies by analyzing connection information of the database server, which DBMSs store on the client-side. They introduce a tool that can automatically extract and analyze this information to collaborate with forensic investigations and improve security rules.…”

Section: Dbms Publications Analysis and Discussionmentioning

confidence: 99%

Exploring the Intersection between Databases and Digital Forensics

Seufitelli

Brandão²,

Moro³

2022

jidm

View full text Add to dashboard Cite

Digital forensics has attracted attention from assorted researchers, who primarily work on predicting and solving digital hacks and crimes. In turn, the number and types of digital crimes have increased considerably, mainly due to the growing use of digital media to perform daily personal and professional tasks. Like most computer-related activities, data is at the center of such hacks and crimes. Hence, this work presents a systematic literature review of publications at the intersection between Digital Forensics and Databases. We discuss problems and trends of two main categories: Data Building and Database Management Systems. Overall, this research opens the doors for the communication between databases and an area with several exciting and concrete challenges, with great potential for social, economic, and technical-scientific contributions.

show abstract

Section: Dbms Publications Analysis and Discussionmentioning

confidence: 99%

Exploring the Intersection between Databases and Digital Forensics

Seufitelli

Brandão²,

Moro³

2022

jidm

View full text Add to dashboard Cite

show abstract

“…Such information can be acquired by investigating the host computers inside a company. Out of all the information acquired, it is possible to find important information such as account information, which leads to connecting to the database server, so it can be highly utilized for an actual forensic investigation .…”

Section: Related Workmentioning

confidence: 99%

The effective method of database server forensics on the enterprise environment

Son¹,

Lee²,

Jeon³

et al. 2012

Security Comm Networks

Self Cite

View full text Add to dashboard Cite

When a forensic investigation is carried out in the enterprise environment, most of the important data are stored in database servers, and data stored in them are very important elements for a forensic investigation. As for database servers with such data stored, there are over 10 various kinds, such as SQL Server and Oracle. All the methods of investigating a database system are important, but this study suggests a single methodology likely to investigate all the database systems while considering the unique characteristics of each database system. A method of detecting a server and acquiring and investigating data in the server can be effectively used for such an investigation on the enterprise environment. For the existing investigation on server systems, severs should be shut down, and disc imaging should be conducted first. However, such a method may inflict great losses on the company in some cases. That is why we need a method to acquire data of a server in on‐line state, and this study discusses this method. Besides, on the basis of methodology, this study attempts to determine a possibility that this new forensic investigation method can be practically used by directly applying this method to SQL Server and MySQL databases. Copyright © 2012 John Wiley & Sons, Ltd.

show abstract

Analysis of Connection Information for Database Server Detection

Cited by 2 publications

References 4 publications

Exploring the Intersection between Databases and Digital Forensics

Exploring the Intersection between Databases and Digital Forensics

The effective method of database server forensics on the enterprise environment

Contact Info

Product

Resources

About