“Ideal Log Setting For Database Forensics Reconstruction”

Adedayo and Olivier

2015

Citation information

O. M. Adedayo and M. S. Olivier. “Ideal Log Setting For Database Forensics Reconstruction”. In: Digital Investigation 12 (2015), 27–40

Abstract

The ability to reconstruct the data stored in a database at an earlier time is an important aspect of database forensics. Past research shows that the log file in a database can be useful for reconstruction. However, in many database systems there are various options that control which information is included in the logs. This paper introduces the notion of the ideal log setting necessary for an effective reconstruction process in database forensics. The paper provides a survey of the default logging preferences in some of the popular database management systems and identifies the information that a database log should contain in order to be useful for reconstruction. The challenges that may be encountered in storing the information as well as ways of overcoming the challenges are discussed. Possible logging preferences that may be considered as the ideal log setting for the popular database systems are also proposed. In addition, the paper relates the identified requirements to the three dimensions of reconstruction in database forensics and points out the additional requirements and/or techniques that may be required in the different dimensions.

Definitive version

The definitive version of the paper is available from the publisher.
DOI: 10.1016/j.diin.2014.12.002

BibTeX reference

@article(dblogset,
author={Oluwasola Mary Adedayo and Martin S Olivier},
title={Ideal Log Setting For Database Forensics Reconstruction},
journal={Digital Investigation},
year={2015},
volume={12},
pages={27-40} )


[Publications] [Home]
Page maintained by Martin Olivier
Database updated: November 8, 2015

Beta version of new bibliography database; please report errors (or copyright violations) that may have slipped in.