Advertisement

Personal and Ubiquitous Computing

, Volume 16, Issue 6, pp 707–715 | Cite as

A recovery method of deleted record for SQLite database

  • Sangjun Jeon
  • Jewan Bang
  • Keunduck Byun
  • Sangjin LeeEmail author
Original Article

Abstract

SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.

Keywords

SQLite Recovery Record Database 

Notes

Acknowledgments

“This research was supported by the MKE (The Ministry of Knowledge Economy), Korea, under the “ITRC” support program supervised by the NIPA (National IT Industry Promotion Agency)” (NIPA-2010-C1090-1001-0004).

References

  1. 1.
    Haerder T (1983) Principles of transaction-oriented database recovery, ACM Comput Surv 15:287–317Google Scholar
  2. 2.
    Pereira MT (2004) Forensic analysis of the Firefox 3 Internet history and recovery of deleted SQLite records, Digit Investig 5:93–103Google Scholar
  3. 3.
    Newman C (2004) “SQLite” MacmillanComputerPubGoogle Scholar
  4. 4.
    SQLite (2004) SQL as understood by SQLite, http://www.sqlite.org/lang.html
  5. 5.
    SQLite (2004) Well-known users of SQLite, http://www.sqlite.org/famous.html
  6. 6.
  7. 7.
    SQLite (2004) Datatypes in SQLite version 3, http://www.sqlite.org/datatype3.html

Copyright information

© Springer-Verlag London Limited 2011

Authors and Affiliations

  • Sangjun Jeon
    • 1
  • Jewan Bang
    • 1
  • Keunduck Byun
    • 1
  • Sangjin Lee
    • 1
    Email author
  1. 1.Digital Forensic Research CenterKorea UniversitySeoulSouth Korea

Personalised recommendations