Browser unable to execute script; please use the site map to navigate the site.

Ideal Log Setting For Database Forensics Reconstruction

Adedayo and Olivier


(Citation)Citation information

O. M. Adedayo and M. S. Olivier. “Ideal Log Setting For Database Forensics Reconstruction”. In: Digital Investigation 12 (2015), pp. 27–40


The ability to reconstruct the data stored in a database at an earlier time is an important aspect of database forensics. Past research shows that the log file in a database can be useful for reconstruction. However, in many database systems there are various options that control which information is included in the logs. This paper introduces the notion of the ideal log setting necessary for an effective reconstruction process in database forensics. The paper provides a survey of the default logging preferences in some of the popular database management systems and identifies the information that a database log should contain in order to be useful for reconstruction. The challenges that may be encountered in storing the information as well as ways of overcoming the challenges are discussed. Possible logging preferences that may be considered as the ideal log setting for the popular database systems are also proposed. In addition, the paper relates the identified requirements to the three dimensions of reconstruction in database forensics and points out the additional requirements and/or techniques that may be required in the different dimensions.

(Authoritative version on publisher's site)Definitive version

The definitive version of the paper is available from the publisher.
DOI: 10.1016/j.diin.2014.12.002

(BibTeX record)BibTeX reference

author={Oluwasola Mary Adedayo and Martin S Olivier},
title={Ideal Log Setting For Database Forensics Reconstruction},
journal={Digital Investigation},
pages={27--40} )