NOVEL METHODOLOGIES TO DETECT COVERT DATABASES

Abstract

Companies have substituted paper based systems with IT systems, such as DBMS (Database Management System), EDMS (Electronic Document Management System), and ERP (Enterprise Resource Planning) system We should focus or attention on discovering sensitive information in a database server, since the majority of corporations use DBMS However, concealment is difficult to observe and detect, because perpetrators do their best to hide their illegal activities In particular, we need to consider the case of a cover database server This paper proposes methodologies to detect covert database servers that would be helpful to forensic investigators Therefore, we describe an example of a covert database server and suggest several detection techniques. Finally, we provide an investigation scenario that applied our methodology in the real world.