The Recovery Method for MySQL InnoDB Using Feature of IBD Structure


KIPS Transactions on Computer and Communication Systems, Vol. 6, No. 2, pp. 59-66, Feb. 2017
10.3745/KTCCS.2017.6.2.59,   PDF Download:
Keywords: Database Forensic, The Database Recovery in Record, Digital Forensic, InnoDB Storage Engine, MySQL Forensic
Abstract

MySQL database is the second place in the market share of the current database. Especially InnoDB storage engine has been used in the default storage engine from the version of MySQL5.5. And many companies are using the MySQL database with InnoDB storage engine. Study on the structural features and the log of the InnoDB storage engine in the field of digital forensics has been steadily underway, but for how to restore on a record-by-record basis for the deleted data, has not been studied. In the process of digital forensic investigation, database administrators damaged evidence for the purpose of destruction of evidence. For this reason, it is important in the process of forensic investigation to recover deleted record in database. In this paper, We proposed the method of recovering deleted data on a record-by-record in database by analyzing the structure of MySQL InnoDB storage engine. And we prove this method by tools. This method can be prevented by database anti forensic, and used to recover deleted data when incident which is related with MySQL InnoDB database is occurred.


Statistics
Show / Hide Statistics

Statistics (Cumulative Counts from September 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article
[IEEE Style]
J. Jang, D. Jeoung, S. J. Lee, "The Recovery Method for MySQL InnoDB Using Feature of IBD Structure," KIPS Transactions on Computer and Communication Systems, vol. 6, no. 2, pp. 59-66, 2017. DOI: 10.3745/KTCCS.2017.6.2.59.

[ACM Style]
Jeewon Jang, Doowon Jeoung, and Sang Jin Lee. 2017. The Recovery Method for MySQL InnoDB Using Feature of IBD Structure. KIPS Transactions on Computer and Communication Systems, 6, 2, (2017), 59-66. DOI: 10.3745/KTCCS.2017.6.2.59.