Abstract
The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.
| Original language | English |
|---|---|
| Title of host publication | Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 |
| DOIs | |
| Publication status | Published - 2009 Dec 1 |
| Event | 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 - Jeju Island, Korea, Republic of Duration: 2009 Dec 10 → 2009 Dec 12 |
Other
| Other | 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 |
|---|---|
| Country | Korea, Republic of |
| City | Jeju Island |
| Period | 09/12/10 → 09/12/12 |
Fingerprint
Keywords
- Component
- Connection information
- Database
- Database forensic
- Detection
- Forensic tool
ASJC Scopus subject areas
- Computational Theory and Mathematics
- Computer Science Applications
Cite this
Analysis of connection information for database server detection. / Han, Jisung; Lee, Keun Gi; Choi, Joonho; Lim, Kyung Soo; Lee, Sangjin.
Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009. 2009. 5404207.Research output: Chapter in Book/Report/Conference proceeding › Conference contribution
}
TY - GEN
T1 - Analysis of connection information for database server detection
AU - Han, Jisung
AU - Lee, Keun Gi
AU - Choi, Joonho
AU - Lim, Kyung Soo
AU - Lee, Sangjin
PY - 2009/12/1
Y1 - 2009/12/1
N2 - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.
AB - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.
KW - Component
KW - Connection information
KW - Database
KW - Database forensic
KW - Detection
KW - Forensic tool
UR - http://www.scopus.com/inward/record.url?scp=80655134672&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=80655134672&partnerID=8YFLogxK
U2 - 10.1109/CSA.2009.5404207
DO - 10.1109/CSA.2009.5404207
M3 - Conference contribution
AN - SCOPUS:80655134672
SN - 9781424449460
BT - Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
ER -