Publication | Closed Access
Database management strategy and recovery methods of Android
11
Citations
0
References
2014
Year
Database AnalysisFile SystemEngineeringDatabase SystemDatabase ForensicsDistributed DatabaseWal FileData RecoveryData RestorationManagementInformation ForensicsData IntegrationMobile DatabaseInformation ManagementLog FilesMobile Device ForensicsData ManagementDatabase Management Strategy
Database analysis and deleted record recovery are key aspects of digital forensics. The paper aims to develop a recovery method for Android SQLite database operating records from WAL files by analyzing write‑in rules and log files during updates. The authors analyze write‑in rules and log files, propose a WAL‑based recovery method, and devise a technique to recover deleted ext4 log files to construct a database operation timeline. Experiments with images under varying times and conditions confirm the method’s effectiveness, though limitations are noted.
Database analysis and the recovery of deleted record are two of the most important parts in digital forensics. This paper focuses on the management mechanism of Android S MS database, involving the analyses of write-in rules of database and log files during the data updating process. Based on the research results, a recovery method for database operating records from WAL file is proposed. To solve the problem that the log file is emptied, this paper presents a recovery method for the deleted log file for ext4 file system, thus constructing a database operating record timeline. Finally, an experiment based on images generated in different time and conditions is carried out to validate the effectiveness of the proposed method, discussion on its limitations is conducted.