In 2014, we launched our open-access repository which offers full text access to conference proceedings from many of our events including the INC and HAISA series. These papers are free to access and distribute (subject to citing the source).
» Openaccess proceedings » 7th International Workshop on Digital Forensics and Incident Analysis (WDFIA 2012)
 | 7th International Workshop on Digital Forensics and Incident Analysis (WDFIA 2012) |
Title: Arguments and Methods for Database Data Model Forensics
Author(s): Hector Beyers, Martin Olivier, Gerhard Hancke
Reference: pp139-149
Keywords: Database Forensics, Data Model, Database Layers
Abstract: A Database Management System (DBMS) consists of metadata and data. The metadata influences the way the data is presented to the user and this presents various forensic complications. The data model can be viewed as the highest level of metadata which governs the way other metadata and data in the DBMS are presented to the user. The data model can be modified to hide or tamper with forensic evidence. In this study the focus is on the data model of the DBMS and arguments are provided to indicate why the data model is an important consideration when conducting a forensic investigation on a DBMS. Various methods are presented to transform the data model into a desired state for a forensic investigation and these methods are measured against set out criteria. No one method is adequate for every forensic investigation. A forensic investigator should understand the various methods and select the correct data model state and method to convert the data model into that required state.
Download count: 2088
How to get this paper:
PDF copy of this paper is free to download. You may distribute this copy providing you cite this page as the source.