A Novel Approach for Monitoring SQL Anti-Forensic Attacks Using Pattern Matching for Digital Forensic Investigation

  • Vaibhav T. Patil
  • Amrita A. Manjrekar
Part of the Communications in Computer and Information Science book series (CCIS, volume 377)

Abstract

Over the past few years the attacks on Software systems is increasing at an astonishing rate resulting in high revenue losses. Hence, Cyber/Digital forensics plays an important role by providing methods to acquire, asses, interpret, and use digital evidence to fetch conclusive details of cyber crime behavior. Recent trend in cyber crimes is the use of Anti-Forensic attacks to thwart the process of digital investigation by tampering the evidences.

The said system focuses on monitoring the Anti-Forensic attacks in the process of Digital Forensic Investigation. The system first identifies the different Anti-forensic attacks (Deletion /Modification /Hiding /Addition of evidences) by using a pattern matching algorithm, Finally the system effectively generates the reports and suggestions in accordance with the attacks. This system will prove helpful to the digital forensic investigators as well as other Government organizations in collecting post crime evidences and trace the identities of the attackers.

Keywords

Digital Forensics Anti-Forensic attacks Pattern Matching 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Kessler, G.C.: The Role of Computer Forensics in Law EnforcementGoogle Scholar
  2. 2.
    Rekhis, S., Boudriga, N.: A System for Formal Digital Forensic Investigation Aware of Anti-Forensic Attack. IEEE Transaction on Information Forensics and Security 7(2) (April 2012)Google Scholar
  3. 3.
    Garfinkel, S.: Anti-forensics: Techniques, detection and countermeasures. In: Proc. 2nd Int. Conf. i-Warfare and Security (ICIW), Monterey, CA, March 8-9 (2007)Google Scholar
  4. 4.
    Arasteha, A.R., Debbabi, M., Sakhaa, A., Saleh, M.: Analyzing multiple logs for forensic evidence. Digital Investigation 4(1), 82–91 (2007)CrossRefGoogle Scholar
  5. 5.
    Harris, R.: Arriving at an anti-forensics consensus: Examining how to define and control the anti-forensics problem. Digital Investigation 3(1), 44–49 (2006)CrossRefGoogle Scholar
  6. 6.
    Pajek, P., Pimenidis, E.: Computer anti-forensics methods and their impact on computer forensic investigation. In: Jahankhani, H., Hessami, A.G., Hsu, F. (eds.) ICGS3 2009. CCIS, vol. 45, pp. 145–155. Springer, Heidelberg (2009)CrossRefGoogle Scholar
  7. 7.
    Christian, S.J., Peron, M.: Legary.: Digital Anti-Forensics: merging trends in data transformation techniques. In: Seccuris LabsGoogle Scholar
  8. 8.
    Cerrudo, C.: SQL Server AntiForensics: Techniques and CountermeasuresGoogle Scholar
  9. 9.
    Alqadi, Z.A.A., Aqel, M., El Emary, I.M.M.: Multiple Skip Multiple pattern Matching Algorithm(MSMPMA). IAENG International Journal of Computer Science 34(2) (2007)Google Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2013

Authors and Affiliations

  • Vaibhav T. Patil
    • 1
  • Amrita A. Manjrekar
    • 2
  1. 1.Computer Science and TechnologyShivaji UniversityKolhapurIndia
  2. 2.Department of TechnologyShivaji UniversityKolhapurIndia

Personalised recommendations