Title

Database forensics

Source of Publication

Proceedings of the 2010 Information Security Curriculum Development Annual Conference, InfoSecCD'10

Abstract

At the user or surface level, most Database Management System (DBMS) are similar. Most databases contain multiple tables, a standardized query language, primary key, foreign key, referential integrity, and metadata. With regard to physical file structures, concurrency mechanisms, security mechanisms, query optimization and datawarehouse techniques, databases may be radically different from each other. Most Forensic tools are too time consuming to be applied to large databases. Meanwhile, database tools such as oracle logminer and auditing features can assist in forensics, but were not created for that purpose. Many of these tools alter the database in ways that may complicate the use of their results in a legal proceeding. This paper analyzes the challenges of digital forensics, related literature, topics involved, current options for performing forensics on databases as well as considerations in teaching database forensics. Copyright © 2010 ACM.

Document Type

Conference Proceeding

ISBN

['9781450302029']

First Page

62

Last Page

65

Publication Date

12-1-2010

DOI

10.1145/1940941.1940958

Share

COinS