Browse > Article
http://dx.doi.org/10.13089/JKIISC.2011.21.3.143

The Method of Recovery for Deleted Record in the Unallocated Space of SQLite Database  

Jeon, Sang-Jun (Center for the Information Security Technologies)
Byun, Keun-Duck (Center for the Information Security Technologies)
Bang, Je-Wan (Center for the Information Security Technologies)
Lee, Guen-Gi (Center for the Information Security Technologies)
Lee, Sang-Jin (Center for the Information Security Technologies)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.21, no.3, 2011 , pp. 143-154 More about this Journal
Abstract
SQLite is a small sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system, and in turn suggests a recovery Tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.
Keywords
SQLite; Database; Recovery; Record; Structure; tool;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Mike Owens,Michael Owens, The definitive guide to SQLite, Apress , May. 2006
2 R.A Crus, "Data recovery in IBM database 2," IBM Systems Journal, Vol(23), pp. 178-188 . March, 1984
3 SQLite, "iPhone OS Data Management ," http://developer.apple.com/technologies/iphone/data-management.html
4 Theo Haerder, "Principles of transaction- oriented database recovery," ACM Computing Surveys (CSUR), pp. 287-317, December. 1983
5 Joost S.M. Verhofstad, "Recovery Techniques for Database Systems," ACM Computing Surveys (CSUR), pp. 167-195 , June. 1978
6 SQLite, "SQL As Understood By SQLite," http://www.sqlite.org/lang.html
7 SQLite, "Datatypes In SQLite Version 3," http://www.sqlite.org/datatype3.html
8 SQLite, "Well-Known Users of SQLite," http://www.sqlite.org/famous.html
9 Murilo Tito Pereira, "Forensic analysis of the Firefox 3 Internet history and recovery of deleted SQLite records," Digital Investigation, pp. 93-103 , March. 2004.
10 Chris Newman, SQLite, Macmillan ComputerPub, October. 2004