Browse > Article
http://dx.doi.org/10.13089/JKIISC.2017.27.6.1347

The Research on Data Concealing and Detection of SQLite Database  

Lee, Jae-hyoung (Dept. of Financial Information Security, Kookmin University)
Cho, Jaehyung (Dept. of Financial Information Security, Kookmin University)
Hong, Kiwon (Dept. of Financial Information Security, Kookmin University)
Kim, Jongsung (Dept. of Financial Information Security, Kookmin University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.27, no.6, 2017 , pp. 1347-1359 More about this Journal
Abstract
SQLite database is a file-based DBMS(Database Management System) that provides transactions, and it is loaded on smartphone because it is appropriate for lightweight platform. AS the usage of smartphone increased, SQLite-related crimes can occur. In this paper, we proposed a new concealing method for SQLite db file and a detection method against it. As a result of concealing experiments, it is possible to intentionally conceal 70bytes in the DB file header and conceal original data by inserting artificial pages. But it can be detected by parsing 70bytes based on SQLite structure or using the number of record and index. After that, we proposed detection algorithm for concealed data.
Keywords
Database; Digital Forensics; SQLite; Concealing; Detection;
Citations & Related Records
Times Cited By KSCI : 2  (Citation Analysis)
연도 인용수 순위
1 Keungi Lee, Seokhee Lee, and Sangjin Lee, "A Study on Detection of Covert Database System", Korean Institute of Broadcast and Media Engineers, pp. 197-200, Feb. 2008.
2 Jongmin Jin, "A Study on System Artifacts Investigation Technique for Identifying Database Concealment", Ph. M. Thesis, Department of Mathmatical Information Science, Seoul National University, Feb. 2017.
3 Sangjun Jeon, Keunduck Byun, Jewan Bang, Guengi Lee, Sangjin Lee, "The Method of Recovery for Deleted Record in the Unallocated Space of SQLite Database", Masters Degree. Thesis, Journal of the Korea Institute of Information Security & Cryptology, Vol. 21, No. 3, pp. 143-154, Jun. 2011.
4 Joonhee Lee, Mincheol Shin, Yongil Jang, and Sanghyun Park, "A Novel Recovery Scheme for SQLite Based on Logical Logging", Journal of KIIT, Vol. 12, No. 11, pp. 181-192, Nov. 2014.
5 SangJun Jeon, Jewan Bang, KeunDuck Byun, GuenGi Lee, and SangJin Lee, "The Method of Recovery for Deleted Record in the Unallocated Space of SQLite Database", Journal of Korea Institute of Information Security and Cryptology, Vol. 21, No. 3, pp. 143-154, Jun. 2011.
6 Gyu-Won Lee, Seung-Jei Yang, Hyun-Uk Hwang, Kibom Kim, Taejoo Chang, and Ki-Wook Sohn, "A Recovery Scheme for the Deleted Overflow Data in SQLite Database", Journal of KIIT, Vol. 10, No. 11, pp. 143-153, Nov. 2012.