A method and tool to recover data deleted from a MongoDB
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Yoon, Jongseong | - |
dc.contributor.author | Lee, Sangjin | - |
dc.date.accessioned | 2021-09-02T14:04:28Z | - |
dc.date.available | 2021-09-02T14:04:28Z | - |
dc.date.created | 2021-06-16 | - |
dc.date.issued | 2018-03 | - |
dc.identifier.issn | 1742-2876 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/76855 | - |
dc.description.abstract | DBMS stores an important data, which is one of the important analytical subjects for analysis in digital forensics. The technique of recovering deleted data from the DBMS plays an important role in finding the evidence in forensic investigation cases. Although relational DBMS is used as important data storage until now, NoSQL DBMSs is used more often due to the growing pursue of Big Data. This increases the potential to analyze a NoSQL DMBS in forensic cases. In reality, data from approximately 26,000 servers has been deleted by a massive ransom attack on vulnerable MongoDB server. Therefore, investigation of internal structure analysis and deleted data recovery techniques of NoSQL DBMS is essential. In this paper, we research the recovery method on deleted data in MongoDB that is widely used. We have analyzed the internal structures of the WiredTiger and MMAPv1 storage engines, which are the MongoDB's disk-based storage engines. Moreover, we have implemented the recovery algorithm as a tool as well as have evaluated its performance on real and self-generated experiment data. (C) 2017 Elsevier Ltd. All rights reserved. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | ELSEVIER SCI LTD | - |
dc.subject | FORENSIC ANALYSIS | - |
dc.title | A method and tool to recover data deleted from a MongoDB | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Lee, Sangjin | - |
dc.identifier.doi | 10.1016/j.diin.2017.11.001 | - |
dc.identifier.scopusid | 2-s2.0-85036650332 | - |
dc.identifier.wosid | 000432474900011 | - |
dc.identifier.bibliographicCitation | DIGITAL INVESTIGATION, v.24, pp.106 - 120 | - |
dc.relation.isPartOf | DIGITAL INVESTIGATION | - |
dc.citation.title | DIGITAL INVESTIGATION | - |
dc.citation.volume | 24 | - |
dc.citation.startPage | 106 | - |
dc.citation.endPage | 120 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Interdisciplinary Applications | - |
dc.subject.keywordPlus | FORENSIC ANALYSIS | - |
dc.subject.keywordAuthor | MongoDB | - |
dc.subject.keywordAuthor | Recovery of deleted data from database | - |
dc.subject.keywordAuthor | NoSQL database forensics | - |
dc.subject.keywordAuthor | Database forensics | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.