Analysis of connection information for database server detection

Jisung Han, Keun Gi Lee, Joonho Choi, Kyung Soo Lim, Sangjin Lee

Research output: Chapter in Book/Report/Conference proceedingConference contribution

2 Citations (Scopus)

Abstract

The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.

Original languageEnglish
Title of host publicationProceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
DOIs
Publication statusPublished - 2009 Dec 1
Event2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 - Jeju Island, Korea, Republic of
Duration: 2009 Dec 102009 Dec 12

Other

Other2009 2nd International Conference on Computer Science and Its Applications, CSA 2009
CountryKorea, Republic of
CityJeju Island
Period09/12/1009/12/12

Fingerprint

Servers
Industry

Keywords

  • Component
  • Connection information
  • Database
  • Database forensic
  • Detection
  • Forensic tool

ASJC Scopus subject areas

  • Computational Theory and Mathematics
  • Computer Science Applications

Cite this

Han, J., Lee, K. G., Choi, J., Lim, K. S., & Lee, S. (2009). Analysis of connection information for database server detection. In Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009 [5404207] https://doi.org/10.1109/CSA.2009.5404207

Analysis of connection information for database server detection. / Han, Jisung; Lee, Keun Gi; Choi, Joonho; Lim, Kyung Soo; Lee, Sangjin.

Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009. 2009. 5404207.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Han, J, Lee, KG, Choi, J, Lim, KS & Lee, S 2009, Analysis of connection information for database server detection. in Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009., 5404207, 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009, Jeju Island, Korea, Republic of, 09/12/10. https://doi.org/10.1109/CSA.2009.5404207
Han J, Lee KG, Choi J, Lim KS, Lee S. Analysis of connection information for database server detection. In Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009. 2009. 5404207 https://doi.org/10.1109/CSA.2009.5404207
Han, Jisung ; Lee, Keun Gi ; Choi, Joonho ; Lim, Kyung Soo ; Lee, Sangjin. / Analysis of connection information for database server detection. Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009. 2009.
@inproceedings{b76a90692dd2476a89cf939bd935090b,
title = "Analysis of connection information for database server detection",
abstract = "The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.",
keywords = "Component, Connection information, Database, Database forensic, Detection, Forensic tool",
author = "Jisung Han and Lee, {Keun Gi} and Joonho Choi and Lim, {Kyung Soo} and Sangjin Lee",
year = "2009",
month = "12",
day = "1",
doi = "10.1109/CSA.2009.5404207",
language = "English",
isbn = "9781424449460",
booktitle = "Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009",

}

TY - GEN

T1 - Analysis of connection information for database server detection

AU - Han, Jisung

AU - Lee, Keun Gi

AU - Choi, Joonho

AU - Lim, Kyung Soo

AU - Lee, Sangjin

PY - 2009/12/1

Y1 - 2009/12/1

N2 - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.

AB - The advance in mass data processing technology allowed companies to possess various computer resources, including database, regardless of the companies' scale. When investigating companies, it is crucial for investigators to search for database server that contains data of accounting and HR. However, detecting the database server inside many computer resources is often obstructed by noncooperation of the target companies. Thus, it is crucial to study methods for efficient database detection. So that, In this paper, we propose client-based methods for detecting database by analyzing connection information of the database server, which is stored on the client system by SQL development tool. We also introduce the implementation of a tool that can automatically extract and analyze this information.

KW - Component

KW - Connection information

KW - Database

KW - Database forensic

KW - Detection

KW - Forensic tool

UR - http://www.scopus.com/inward/record.url?scp=80655134672&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=80655134672&partnerID=8YFLogxK

U2 - 10.1109/CSA.2009.5404207

DO - 10.1109/CSA.2009.5404207

M3 - Conference contribution

SN - 9781424449460

BT - Proceedings of the 2009 2nd International Conference on Computer Science and Its Applications, CSA 2009

ER -