Title
Correctness proof for database reconstruction algorithm.
Abstract
The increasing usage of databases in storing critical and sensitive information in various organizations has led to an increase in the rate at which databases are exploited in computer crimes. Unfortunately, despite that various digital forensics investigations involving databases have been explored in theory and in practice, database forensics has received little or research attention and there is still no defined underlying model for any aspect of database forensics. This paper describes our earlier algorithm for reconstructing the information in a database for forensics purposes and presents the proof of correctness of the algorithm. The database reconstruction algorithm determines the data in a relation on the database at some earlier time of interest using the current instance of the database and the log of modifying queries that have been performed on it from the time of interest to the present time. The paper describes inverse functions for the operators of the relational algebra and discusses the notion of relational algebra log and value blocks of a relation which are used in the algorithm. A major part of the paper presents the proof of correctness of the database reconstruction algorithm described.
Year
DOI
Venue
2012
10.1016/j.diin.2012.09.002
Digital Investigation
Keywords
Field
DocType
Digital forensics,Database forensics,Database reconstruction,Relational algebra,Inverse relational algebra,Forensics investigation
Data mining,Relational database,Database model,Computer security,Computer science,View,Theoretical computer science,Database schema,Database design,Database theory,Database forensics,Database,Probabilistic database
Journal
Volume
Issue
ISSN
9
2
1742-2876
Citations 
PageRank 
References 
4
0.52
9
Authors
2
Name
Order
Citations
PageRank
Oluwasola Mary Fasan1151.71
Martin S. Olivier246573.94