Full Text Available

Note: Clicking the button above will open the full text document at the original institutional repository in a new window.

Reconstruction in Database Forensics

Thesis (PhD)--University of Pretoria, 2015.

Saved in:
Bibliographic Details
Other Authors: Olivier, Martin S.
Format: Thesis
Language:English
Published: University of Pretoria 2015
Subjects:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1867613553749393408
access_status_str Open Access
author2 Olivier, Martin S.
author_browse Olivier, Martin S.
author_facet Olivier, Martin S.
collection Thesis
dc_rights_str_mv © 2015 University of Pretoria. All rights reserved. The copyright in this work vests in the University of Pretoria. No part of this work may be reproduced or transmitted in any form or by any means, without the prior written permission of the University of Pretoria.
description Thesis (PhD)--University of Pretoria, 2015.
format Thesis
id oai:repository.up.ac.za:2263/43777
institution University of Pretoria (South Africa)
language English
last_indexed 2026-06-10T12:37:58.997Z
license_str Other — see source repository
provenance_str_mv Harvested via OAI-PMH from UPSpace — University of Pretoria Institutional Repository
publishDate 2015
publishDateRange 2015
publishDateSort 2015
publisher University of Pretoria
publisherStr University of Pretoria
record_format dspace
source_str UPSpace — University of Pretoria Institutional Repository
spelling oai:repository.up.ac.za:2263/43777 Reconstruction in Database Forensics Olivier, Martin S. Adedayo, Oluwasola Mary Computer Science Digital Forensics Database Forensics Digital Forensics Investigation Forensic analysis UCTD Engineering, built environment and information technology theses SDG-09 Engineering, built environment and information technology theses SDG-16 Thesis (PhD)--University of Pretoria, 2015. The increasing usage of databases in the storage of critical and sensitive information in many organizations has led to an increase in the rate at which databases are exploited in computer crimes. Databases are often manipulated to facilitate crimes and as such are usually of interest during many investigations as useful information relevant to the investigation can be found therein. A branch of digital forensics that deals with the identification, preservation, analysis and presentation of digital evidence from databases is known as database forensics. Despite the large amount of information that can be retrieved from databases and the amount of research that has been done on various aspects of databases, database security and digital forensics in general, very little has been done on database forensics. Databases have also been excluded from traditional digital investigations until very recently. This can be attributed to the inherent complexities of databases and the lack of knowledge on how the information contained in the database can be retrieved, especially in cases where such information have been modified or existed in the past. This thesis addresses one major part of the challenges in database forensics, which is the reconstruction of the information stored in the database at some earlier time. The dimensions involved in a database forensics analysis problem are identified and the thesis focuses on one of these dimensions. Concepts such as the relational algebra log and the inverse relational algebra are introduced as tools in the definition of a theoretical framework that can be used for database forensics. The thesis provides an algorithm for database reconstruction and outlines the correctness proof of the algorithm. Various techniques for a complete regeneration of deleted or lost data during a database forensics analysis are also described. Due to the importance of having adequate logs in order to use the algorithm, specifications of an ideal log configuration for an effective reconstruction process are given, putting into consideration the various dimensions of the database forensics problem space. Throughout the thesis, practical situations that illustrate the application of the algorithms and techniques described are given. The thesis provides a scientific approach that can be used for handling database forensics analysis practice and research, particularly in the aspect of reconstructing the data in a database. It also adds to the field of digital forensics by providing insights into the field of database forensics reconstruction. bs2026 Computer Science PhD Unrestricted SDG-09: Industry, innovation and infrastructure SDG-16: Peace, justice and strong institutions 2015-02-23T12:16:12Z 2015-02-23T12:16:12Z 2015-04-21 2015 Thesis Adedayo, OM 2015, Reconstruction in Database Forensics, PhD Thesis, University of Pretoria, Pretoria, viewed yymmdd <http://hdl.handle.net/2263/43777> A2015 http://hdl.handle.net/2263/43777 en © 2015 University of Pretoria. All rights reserved. The copyright in this work vests in the University of Pretoria. No part of this work may be reproduced or transmitted in any form or by any means, without the prior written permission of the University of Pretoria. application/pdf University of Pretoria
spellingShingle Computer Science
Digital Forensics
Database Forensics
Digital Forensics Investigation
Forensic analysis
UCTD
Engineering, built environment and information technology theses SDG-09
Engineering, built environment and information technology theses SDG-16
Reconstruction in Database Forensics
title Reconstruction in Database Forensics
title_full Reconstruction in Database Forensics
title_fullStr Reconstruction in Database Forensics
title_full_unstemmed Reconstruction in Database Forensics
title_short Reconstruction in Database Forensics
title_sort reconstruction in database forensics
topic Computer Science
Digital Forensics
Database Forensics
Digital Forensics Investigation
Forensic analysis
UCTD
Engineering, built environment and information technology theses SDG-09
Engineering, built environment and information technology theses SDG-16
url http://hdl.handle.net/2263/43777