Universiti Teknologi Malaysia Institutional Repository

Database forensic investigation process models: a review

Al-Dhaqm, A. and Abd Razak, S. and Othman, S. H. and Ali, A. and Ghaleb, F. A. and Rosman, A. S. and Marni, N. (2020) Database forensic investigation process models: a review. IEEE Access, 8 . pp. 48477-48490. ISSN 2169-3536

[img]
Preview
PDF
3MB

Official URL: https://dx.doi.org/10.1109/ACCESS.2020.2976885

Abstract

Database Forensic Investigation (DBFI) involves the identification, collection, preservation, reconstruction, analysis, and reporting of database incidents. However, it is a heterogeneous, complex, and ambiguous field due to the variety and multidimensional nature of database systems. A small number of DBFI process models have been proposed to solve specific database scenarios using different investigation processes, concepts, activities, and tasks as surveyed in this paper. Specifically, we reviewed 40 proposed DBFI process models for RDBMS in the literature to offer up- to-date and comprehensive background knowledge on existing DBFI process model research, their associated challenges, issues for newcomers, and potential solutions for addressing such issues. This paper highlights three common limitations of the DBFI domain, which are: 1) redundant and irrelevant investigation processes; 2) redundant and irrelevant investigation concepts and terminologies; and 3) a lack of unified models to manage, share, and reuse DBFI knowledge. Also, this paper suggests three solutions for the discovered limitations, which are: 1) propose generic DBFI process/model for the DBFI field; 2) develop a semantic metamodeling language to structure, manage, organize, share, and reuse DBFI knowledge; and 3) develop a repository to store and retrieve DBFI field knowledge.

Item Type:Article
Uncontrolled Keywords:database forensic, digital forensic, investigation process model
Subjects:Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions:Computing
ID Code:86964
Deposited By: Narimah Nawil
Deposited On:22 Oct 2020 04:20
Last Modified:22 Oct 2020 04:20

Repository Staff Only: item control page