A recovery method of deleted record for SQLite database

SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital e...

Full description

Saved in:
Bibliographic Details
Published in:Personal and ubiquitous computing 2012-08, Vol.16 (6), p.707-715
Main Authors: Jeon, Sangjun, Bang, Jewan, Byun, Keunduck, Lee, Sangjin
Format: Article
Language:English
Subjects:
Availability
Computer programs
Computer Science
Deletion
Devices
Embedded systems
Forensic engineering
Mobile Computing
Online data bases
Original Article
Personal Computing
Recovery
Smartphones
Software
Structured Query Language-SQL
User Interfaces and Human Computer Interaction
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:SQLite is a small-sized database engine largely used in embedded devices and local application software. The availability of portable devices, such as smartphones, has been extended over the recent years and has contributed to growing adaptation of SQLite. This implies a high likelihood of digital evidences acquired during forensic investigations to include SQLite database files. Where intentional deletion of sensitive data can be made by a suspect, forensic investigators need to recover deleted records in SQLite at the best possible. This study analyzes data management rules used by SQLite and the structure of deleted data in the system and in turn suggests a recovery tool of deleted data. Further, the study examines major SQLite suited software as it validates feasible possibility of deleted data recovery.
ISSN:1617-4909
1617-4917
DOI:10.1007/s00779-011-0428-7