TY - GEN
T1 - Analysis of connection information for database server detection
AU - Han, Jisung
AU - Lee, Keun Gi
AU - Choi, Joonho
AU - Lim, Kyung Soo
AU - Lee, Sangjin
PY - 2009
Y1 - 2009
N2 - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.
AB - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.
KW - Component
KW - Connection information
KW - Database
KW - Database forensic
KW - Detection
KW - Forensic tool
UR - http://www.scopus.com/inward/record.url?scp=80655134672&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=80655134672&partnerID=8YFLogxK
U2 - 10.1109/CSA.2009.5404207
DO - 10.1109/CSA.2009.5404207
M3 - Conference contribution
AN - SCOPUS:80655134672
SN - 9781424449460
T3 - Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
BT - Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
T2 - 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
Y2 - 10 December 2009 through 12 December 2009
ER -