Forensic analysis of database tampering

Pavlou, Kyriacos E.; Snodgrass, Richard T.

doi:10.1145/1142473.1142487

Cited by 24 publications

(3 citation statements)

References 9 publications

(7 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Accuracy is the percentage of number of tuples correctly classified by rule and the number of tuples covered by rule. The coverage for given rule R, is given by Equation (1) and accuracy is given by (2). [38] accuracy(R) = ncorrect ncovers (2) [38] Where, ncovers = The number of tuples covered by rule |D| = Total number of tuples present in transaction ncorrect = The number of tuples correctly classified by rule The coverage and accuracy for insert and update tampering are given in Table 5.…”

Section: • Identify Suspicious Tamperingmentioning

confidence: 99%

See 1 more Smart Citation

Data Tamper Detection from NoSQL Database in Forensic Environment

Chopade

Pachghare

2021

JCSANDM

View full text Add to dashboard Cite

The growth of service sector is increasing the usage of digital applications worldwide. These digital applications are making use of database to store the sensitive and secret information. As the database has distributed over the internet, cybercrime attackers may tamper the database to attack on such sensitive and confidential information. In such scenario, maintaining the integrity of database is a big challenge. Database tampering will change the database state by any data manipulation operation like insert, update or delete. Tamper detection techniques are useful for the detection of such data tampering which play an important role in database forensic investigation process. Use of NoSQL database has been attracted by big data requirements. Previous research work has limited to tamper detection in relational database and very less work has been found in NoSQL database. So there is a need to propose a mechanism to detect the tampering of NoSQL database systems. Whereas this article proposes an idea of tamper detection in NoSQL database such as MongoDB and Cassandra, which are widely used document-oriented and column-based NoSQL database respectively. This research work has proposed tamper detection technique which works in forensic environment to give more relevant outcome on data tampering and distinguish between suspicious and genuine tampering.

show abstract

Section: • Identify Suspicious Tamperingmentioning

confidence: 99%

“…Any alteration in the database is called as database tampering. Database tampering, addresses the problem of determining who, when and what data has been tampered [2]. This article addresses for when and what data has tampered, which may be useful for database forensic studies.…”

Section: Introductionmentioning

confidence: 99%

Data Tamper Detection from NoSQL Database in Forensic Environment

Chopade

Pachghare

2021

JCSANDM

View full text Add to dashboard Cite

show abstract

“…Kyriacos E. Pavlou said about how to investigate data manipulated in the database system, especially suggesting an algorithm likely to find out information about who manipulated the data as well as the fact that the data was manipulated. Such information will be quite useful for cases when work data is lost or leaked out [4].…”

Section: Related Workmentioning

confidence: 99%

The effective method of database server forensics on the enterprise environment

Son¹,

Lee²,

Jeon³

et al. 2012

Security Comm Networks

View full text Add to dashboard Cite

When a forensic investigation is carried out in the enterprise environment, most of the important data are stored in database servers, and data stored in them are very important elements for a forensic investigation. As for database servers with such data stored, there are over 10 various kinds, such as SQL Server and Oracle. All the methods of investigating a database system are important, but this study suggests a single methodology likely to investigate all the database systems while considering the unique characteristics of each database system. A method of detecting a server and acquiring and investigating data in the server can be effectively used for such an investigation on the enterprise environment. For the existing investigation on server systems, severs should be shut down, and disc imaging should be conducted first. However, such a method may inflict great losses on the company in some cases. That is why we need a method to acquire data of a server in on‐line state, and this study discusses this method. Besides, on the basis of methodology, this study attempts to determine a possibility that this new forensic investigation method can be practically used by directly applying this method to SQL Server and MySQL databases. Copyright © 2012 John Wiley & Sons, Ltd.

show abstract

Security Re-engineering for Databases: Concepts and Techniques

Gertz

Gandhi

Handbook of Database Security

View full text Add to dashboard Cite

Forensic analysis of database tampering

Cited by 24 publications

References 9 publications

Data Tamper Detection from NoSQL Database in Forensic Environment

Data Tamper Detection from NoSQL Database in Forensic Environment

The effective method of database server forensics on the enterprise environment

Security Re-engineering for Databases: Concepts and Techniques

Contact Info

Product

Resources

About