Scenario-Based Digital Forensic Investigation of Compromised MySQL Database

Hungwe, Taurai; Venter, Hein S.; Kebande, Victor R.

doi:10.23919/istafrica.2019.8764819

Cited by 4 publications

(2 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Recentely, several research articles have proposed different aspects of database forensic field. For example, [48] offered the methods that can be utilized to perform forensic investigations of a compromised MySQL database. [49] introduced a review paper of the database forensic field and discussed the field limitations and drawbacks.…”

Section: Reconstruction (Perspective Iii)mentioning

confidence: 99%

Towards the Development of an Integrated Incident Response Model for Database Forensic Investigation Field

et al. 2020

Self Cite

View full text Add to dashboard Cite

For every contact that is made in a database, a digital trace will potentially be left and most of the database breaches are mostly aimed at defeating the major security goals (Confidentiality, Integrity, and Authenticity) of data that reside in the database. In order to prove/refute a fact during litigation, it is important to identify suitable investigation techniques that can be used to link a potential incident/suspect to the digital crime. As a result, this paper has proposed suitable steps of constructing and Integrated Incident Response Model (IIRM) that can be relied upon in the database forensic investigation field. While developing the IIRM, design science methodology has been adapted and the outcome of this study has shown significant and promising approaches that could be leveraged by digital forensic experts, legal practitioners and law enforcement agencies. This is owing to the fact, that IIRM construction has followed incident investigation principles that are stipulated in ISO guidelines. INDEX TERMS Database security, database forensics investigation, database incident, pre-incident response, during-incident response, post-incident response.

show abstract

Section: Reconstruction (Perspective Iii)mentioning

confidence: 99%

Towards the Development of an Integrated Incident Response Model for Database Forensic Investigation Field

et al. 2020

Self Cite

View full text Add to dashboard Cite

show abstract

“…Essentially, both stages are used in digital forensics, and the ISO/IEC 27043:2015 standard serves as the primary context for studies on proactive forensic approaches [5][6][7][8][9][10][11][12][13][14]. Drone forensics (DRF) aims to provide the tools and techniques necessary to identify and investigate potential drone-related incidents [15][16][17]. The primary focus of DRF is to identify the drone's owner, the activities that occurred during a dronerelated incident, the nature of the data stored on the drone, and any evidence the drone may have left behind.…”

Section: Introductionmentioning

confidence: 99%

A Conceptual Digital Forensic Investigation Model Applicable to the Drone Forensics Field

Alotaibi,

Al-Dhaqm,

Al-Otaibi

2023

Eng. Technol. Appl. Sci. Res.

View full text Add to dashboard Cite

Although there is a considerable amount of studies in drone forensics that describe numerous practical and technical perspectives, there is a lack of a comprehensive investigation framework. This study used design science research methodology to design a conceptual model for the comprehensive investigation of Unmanned Aerial Vehicles (UAVs) under forensic conditions. This model can identify, capture, preserve, analyze, and document UAV incidents. The proposed model consists of four stages: preparation, data collection, analysis, and documentation. In the preparation stage, data are collected and analyzed about UAV-related resources, including the origin and model of the aircraft, any software or hardware installed onboard, and the legal framework and regulations in place. The data collection stage involves the completion of the collection process, where participants gather parts of the UAV and the data needed, such as the flight controller, flight log, and memory cards. The analysis stage involves analyzing the collected evidence. Lastly, the documentation stage involves documenting relevant evidence, analysis results, and any conclusions derived. This model provides a comprehensive process to forensically investigate UAV incidents and provides an efficient and effective approach to the analysis of UAV evidence, ensuring that evidence was collected and analyzed according to accepted forensic techniques. The proposed model can be applied to any UAV type and legal framework.

show abstract