Categorization and Organization of Database Forensic Investigation ProcessesShow others and affiliations
2020 (English)In: IEEE Access, E-ISSN 2169-3536, Vol. 8, p. 112846-112858Article in journal (Refereed) Published
Abstract [en]
Database forensic investigation (DBFI) is an important area of research within digital forensics. It & x2019;s importance is growing as digital data becomes more extensive and commonplace. The challenges associated with DBFI are numerous, and one of the challenges is the lack of a harmonized DBFI process for investigators to follow. In this paper, therefore, we conduct a survey of existing literature with the hope of understanding the body of work already accomplished. Furthermore, we build on the existing literature to present a harmonized DBFI process using design science research methodology. This harmonized DBFI process has been developed based on three key categories (i.e. planning, preparation and pre-response, acquisition and preservation, and analysis and reconstruction). Furthermore, the DBFI has been designed to avoid confusion or ambiguity, as well as providing practitioners with a systematic method of performing DBFI with a higher degree of certainty.
Place, publisher, year, edition, pages
IEEE, 2020. Vol. 8, p. 112846-112858
Keywords [en]
Databases, Data models, Servers, Digital forensics, Terminology, Adaptation models, Database forensics, database forensic investigation, investigation process model
National Category
Computer Sciences
Identifiers
URN: urn:nbn:se:mau:diva-17949DOI: 10.1109/ACCESS.2020.3000747ISI: 000546414500046Scopus ID: 2-s2.0-85087652045OAI: oai:DiVA.org:mau-17949DiVA, id: diva2:1458261
2020-08-142020-08-142024-09-17Bibliographically approved