A recovery method of deleted record for SQLite database

Sangjun Jeon, Jewan Bang, Keunduck Byun, Sangjin Lee

Research output: Contribution to journalArticle

34 Citations (Scopus)

Abstract

SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.

Original languageEnglish
Pages (from-to)707-715
Number of pages9
JournalPersonal and Ubiquitous Computing
Volume16
Issue number6
DOIs
Publication statusPublished - 2012 Aug 1

Fingerprint

Recovery
Smartphones
Application programs
Information management
Availability
Engines
Software
Data base
Data management
Digital evidence

Keywords

  • Database
  • Record
  • Recovery
  • SQLite

ASJC Scopus subject areas

  • Hardware and Architecture
  • Computer Science Applications
  • Management Science and Operations Research

Cite this

A recovery method of deleted record for SQLite database. / Jeon, Sangjun; Bang, Jewan; Byun, Keunduck; Lee, Sangjin.

In: Personal and Ubiquitous Computing, Vol. 16, No. 6, 01.08.2012, p. 707-715.

Research output: Contribution to journalArticle

Jeon, Sangjun ; Bang, Jewan ; Byun, Keunduck ; Lee, Sangjin. / A recovery method of deleted record for SQLite database. In: Personal and Ubiquitous Computing. 2012 ; Vol. 16, No. 6. pp. 707-715.
@article{c2267cbb97a44d3282e794928fc9bde3,
title = "A recovery method of deleted record for SQLite database",
abstract = "SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.",
keywords = "Database, Record, Recovery, SQLite",
author = "Sangjun Jeon and Jewan Bang and Keunduck Byun and Sangjin Lee",
year = "2012",
month = "8",
day = "1",
doi = "10.1007/s00779-011-0428-7",
language = "English",
volume = "16",
pages = "707--715",
journal = "Personal and Ubiquitous Computing",
issn = "1617-4909",
publisher = "Springer London",
number = "6",

}

TY - JOUR

T1 - A recovery method of deleted record for SQLite database

AU - Jeon, Sangjun

AU - Bang, Jewan

AU - Byun, Keunduck

AU - Lee, Sangjin

PY - 2012/8/1

Y1 - 2012/8/1

N2 - SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.

AB - SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.

KW - Database

KW - Record

KW - Recovery

KW - SQLite

UR - http://www.scopus.com/inward/record.url?scp=84864577929&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84864577929&partnerID=8YFLogxK

U2 - 10.1007/s00779-011-0428-7

DO - 10.1007/s00779-011-0428-7

M3 - Article

AN - SCOPUS:84864577929

VL - 16

SP - 707

EP - 715

JO - Personal and Ubiquitous Computing

JF - Personal and Ubiquitous Computing

SN - 1617-4909

IS - 6

ER -