Source of Publication
Proceedings of the 2010 Information Security Curriculum Development Annual Conference, InfoSecCD'10
At the user or surface level, most Database Management System (DBMS) are similar. Most databases contain multiple tables, a standardized query language, primary key, foreign key, referential integrity, and metadata. With regard to physical file structures, concurrency mechanisms, security mechanisms, query optimization and datawarehouse techniques, databases may be radically different from each other. Most Forensic tools are too time consuming to be applied to large databases. Meanwhile, database tools such as oracle logminer and auditing features can assist in forensics, but were not created for that purpose. Many of these tools alter the database in ways that may complicate the use of their results in a legal proceeding. This paper analyzes the challenges of digital forensics, related literature, topics involved, current options for performing forensics on databases as well as considerations in teaching database forensics. Copyright © 2010 ACM.
Guimaraes, Mario A.M.; Austin, Richard; and Said, Huwida, "Database forensics" (2010). Scopus Indexed Articles. 2173.