Browser unable to execute script; please use the site map to navigate the site.

The Impact of Triggers on Forensic Acquisition and Analysis of Databases

Hauger and Olivier


(Citation)Citation information

W. K. Hauger and M. S. Olivier. “The Impact of Triggers on Forensic Acquisition and Analysis of Databases”. In: SAIEE Africa Research Journal 106.2 (2015), pp. 64–73


An aspect of database forensics that has not received much attention in the academic research community yet is the presence of database triggers. Database triggers and their implementations have not yet been thoroughly analysed to establish what possible impact they could have on digital forensic analysis methods and processes. This paper firstly attempts to establish if triggers could be used as an anti-forensic mechanism in databases to potentially disrupt or even thwart forensic investigations. Secondly, it explores if triggers could be used to manipulate ordinary database actions for nefarious purposes and at the same time implicate innocent parties. The database triggers as defined in the SQL standard were studied together with a number of database trigger implementations. This was done in order to establish what aspects of a trigger might have an impact on digital forensic analysis. It is demonstrated in this paper that certain database forensic acquisition and analysis methods are impacted by the possible presence of non-data triggers. This is specific to databases that provide non-data trigger implementations. Furthermore, it finds that the forensic interpretation and attribution processes should be extended to include the handling and analysis of all database triggers. This is necessary to enable a more accurate attribution of actions in all databases that provide any form of trigger implementations.

(Authoritative version on publisher's site)Definitive version

The definitive version of the paper is available from the publisher.
DOI: 10.23919/SAIEE.2015.8531887

(BibTeX record)BibTeX reference

author={W. K. Hauger and M. S. Olivier},
title={The Impact of Triggers on Forensic Acquisition and Analysis of Databases},
journal={SAIEE Africa Research Journal},
year={2015} )