Name
Title | ||
|---|---|---|
Hybrid Logical Clocks for Database Forensics: Filling the Gap between Chain of Custody and Database Auditing |
Abstract | ||
|---|---|---|
Database audit records are important for investigating suspicious actions against transactional databases. Their admissibility as digital evidence depends on satisfying Chain of Custody (CoC) properties during their generation, collection and preservation in order to prevent their modification, guarantee action accountability, and allow third-party verification. However, their production has relied on auditing capabilities provided by commercial database systems which may not be effective if malicious users (or insiders) misuse their privileges to disable audit controls, and compromise their admissibility. Hence, in this paper, we propose a forensically-aware distributed database architecture that implements CoC properties as functional requirements to produce admissible audit records. The novelty of our proposal is the use of hybrid logical clocks, which compared with a previous centralised vector-clock architecture, has evident advantages as it (i) allows for more accurate provenance and causality tracking of insider actions, (ii) is more scalable in terms of system size, and (iii) although latency is higher (as expected in distributed environments), 70 per cent of user transactions are executed within acceptable latency intervals. |
Year | DOI | Venue |
|---|---|---|
2019 | 10.1109/TrustCom/BigDataSE.2019.00038 | 2019 18th IEEE International Conference On Trust, Security And Privacy In Computing And Communications/13th IEEE International Conference On Big Data Science And Engineering (TrustCom/BigDataSE) |
Keywords | Field | DocType |
database audit,database forensics,database security,hybrid logical clocks,chain of custody,provenance,causality,role segregation | Audit,Computer security,Computer science,Chain of custody,Logical clock,Database security,Database audit,Distributed database,Database forensics,Database,Scalability | Conference |
ISSN | ISBN | Citations |
2324-898X | 978-1-7281-2778-1 | 0 |
PageRank | References | Authors |
0.34 | 6 | 2 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Denys A. Flores | 1 | 3 | 2.15 |
| Arshad Jhumka | 2 | 1 | 5.42 |