Al-Dhaqm, A. and Abd Razak, S. and Othman, S. H. and Ali, A. and Ghaleb, F. A. and Rosman, A. S. and Marni, N. (2020) Database forensic investigation process models: a review. IEEE Access, 8 . pp. 48477-48490. ISSN 2169-3536
|
PDF
3MB |
Official URL: https://dx.doi.org/10.1109/ACCESS.2020.2976885
Abstract
Database Forensic Investigation (DBFI) involves the identification, collection, preservation, reconstruction, analysis, and reporting of database incidents. However, it is a heterogeneous, complex, and ambiguous field due to the variety and multidimensional nature of database systems. A small number of DBFI process models have been proposed to solve specific database scenarios using different investigation processes, concepts, activities, and tasks as surveyed in this paper. Specifically, we reviewed 40 proposed DBFI process models for RDBMS in the literature to offer up- to-date and comprehensive background knowledge on existing DBFI process model research, their associated challenges, issues for newcomers, and potential solutions for addressing such issues. This paper highlights three common limitations of the DBFI domain, which are: 1) redundant and irrelevant investigation processes; 2) redundant and irrelevant investigation concepts and terminologies; and 3) a lack of unified models to manage, share, and reuse DBFI knowledge. Also, this paper suggests three solutions for the discovered limitations, which are: 1) propose generic DBFI process/model for the DBFI field; 2) develop a semantic metamodeling language to structure, manage, organize, share, and reuse DBFI knowledge; and 3) develop a repository to store and retrieve DBFI field knowledge.
Item Type: | Article |
---|---|
Uncontrolled Keywords: | database forensic, digital forensic, investigation process model |
Subjects: | Q Science > QA Mathematics > QA75 Electronic computers. Computer science |
Divisions: | Computing |
ID Code: | 86964 |
Deposited By: | Narimah Nawil |
Deposited On: | 22 Oct 2020 04:20 |
Last Modified: | 22 Oct 2020 04:20 |
Repository Staff Only: item control page