Assembling Metadata for Database Forensics - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Assembling Metadata for Database Forensics

Résumé

Since information is often a primary target in a computer crime, organizations that store their information in database management systems (DBMSs) must develop a capability to perform database forensics. This paper describes a database forensic method that transforms a DBMS into the required state for a database forensic investigation. The method segments a DBMS into four abstract layers that separate the various levels of DBMS metadata and data. A forensic investigator can then analyze each layer for evidence of malicious activity. Tests performed on a compromised PostgreSQL DBMS demonstrate that the segmentation method provides a means for extracting the compromised DBMS components.
Fichier principal
Vignette du fichier
978-3-642-24212-0_7_Chapter.pdf (196.39 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01569562 , version 1 (27-07-2017)

Licence

Paternité

Identifiants

Citer

Hector Beyers, Martin Olivier, Gerhard Hancke. Assembling Metadata for Database Forensics. 7th Digital Forensics (DF), Jan 2011, Orlando, FL, United States. pp.89-99, ⟨10.1007/978-3-642-24212-0_7⟩. ⟨hal-01569562⟩
76 Consultations
516 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More