digital evidence for database tamper detection数字证据篡改检测数据库.pdfVIP

Journal of Information Security, 2012, 3, 113-121 /10.4236/jis.2012.32014 Published Online April 2012 (http://www.SciRP.org/journal/jis) Digital Evidence for Database Tamper Detection 1 2 Shweta Tripathi , Bandu Baburao Meshram 1Department of Computer Engineering, Fr. Agnel Institute of Technology, Navi Mumbai, India 2Head Department of Computer Technology, Veermata Jijabai Technological Institute, Mumbai, India Email: shwetripathi@, bbmeshram@.in Received December 28, 2011; revised February 5, 2012; accepted March 4, 2012 ABSTRACT Most secure database is the one you know the most. Tamper detection compares the past and present status of the system and produces digital evidence for forensic analysis. Our focus is on different methods or identification of different loca- tions in an oracle database for collecting the digital evidence for database tamper detection. Starting with the basics of oracle architecture, continuing with the basic steps of forensic analysis the paper elaborates the extraction of suspicious locations in oracle. As a forensic examiner, collecting digital evidence in a database is a key factor. Planned and a mod- elled way of examination will lead to a valid detection. Based on the literature survey conducted on different aspects of collecting digital evidence for database tamper detection, the paper proposes a block diagram which may guide a data- base forensic examiner to obtain the evidences. Keywords: Tamper Detection; Log Files; Forensics; Oracle Database 1. Introduction 2. Literature Survey Database security is not a new buzz. But identifying the The literature survey explor