Analysis of connection information for database server detection

Jisung Han; Keun Gi Lee; Joonho Choi; Kyung Soo Lim; Sangjin Lee

doi:10.1109/CSA.2009.5404207

Analysis of connection information for database server detection

Jisung Han, Keun Gi Lee, Joonho Choi, Kyung Soo Lim, Sangjin Lee

Graduate School of Information Study

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Citations (Scopus)

Abstract

The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.

Original language	English
Title of host publication	Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
DOIs	https://doi.org/10.1109/CSA.2009.5404207
Publication status	Published - 2009 Dec 1
Event	2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 - Jeju Island, Korea, Republic of Duration: 2009 Dec 10 → 2009 Dec 12

Publication series

Name	Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009

Other

Other	2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
Country	Korea, Republic of
City	Jeju Island
Period	09/12/10 → 09/12/12

Fingerprint

Keywords

Component
Connection information
Database
Database forensic
Detection
Forensic tool

ASJC Scopus subject areas

Computational Theory and Mathematics
Computer Science Applications

Cite this

Han, J., Lee, K. G., Choi, J., Lim, K. S., & Lee, S. (2009). Analysis of connection information for database server detection. In Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 [5404207] (Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009). https://doi.org/10.1109/CSA.2009.5404207

Analysis of connection information for database server detection. / Han, Jisung; Lee, Keun Gi; Choi, Joonho; Lim, Kyung Soo; Lee, Sangjin.

Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009. 2009. 5404207 (Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Han, J, Lee, KG, Choi, J, Lim, KS & Lee, S 2009, Analysis of connection information for database server detection. in Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009., 5404207, Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009, 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009, Jeju Island, Korea, Republic of, 09/12/10. https://doi.org/10.1109/CSA.2009.5404207

Han J, Lee KG, Choi J, Lim KS, Lee S. Analysis of connection information for database server detection. In Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009. 2009. 5404207. (Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009). https://doi.org/10.1109/CSA.2009.5404207

@inproceedings{b76a90692dd2476a89cf939bd935090b,

title = "Analysis of connection information for database server detection",

abstract = "The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.",

keywords = "Component, Connection information, Database, Database forensic, Detection, Forensic tool",

author = "Jisung Han and Lee, {Keun Gi} and Joonho Choi and Lim, {Kyung Soo} and Sangjin Lee",

year = "2009",

month = dec,

day = "1",

doi = "10.1109/CSA.2009.5404207",

language = "English",

isbn = "9781424449460",

series = "Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009",

booktitle = "Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009",

note = "2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 ; Conference date: 10-12-2009 Through 12-12-2009",

}

TY - GEN

T1 - Analysis of connection information for database server detection

AU - Han, Jisung

AU - Lee, Keun Gi

AU - Choi, Joonho

AU - Lim, Kyung Soo

AU - Lee, Sangjin

PY - 2009/12/1

Y1 - 2009/12/1

N2 - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.

AB - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.

KW - Component

KW - Connection information

KW - Database

KW - Database forensic

KW - Detection

KW - Forensic tool

UR - http://www.scopus.com/inward/record.url?scp=80655134672&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=80655134672&partnerID=8YFLogxK

U2 - 10.1109/CSA.2009.5404207

DO - 10.1109/CSA.2009.5404207

M3 - Conference contribution

AN - SCOPUS:80655134672

SN - 9781424449460

T3 - Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009

BT - Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009

T2 - 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009

Y2 - 10 December 2009 through 12 December 2009

ER -

Access to Document

10.1109/CSA.2009.5404207