Method of Recovery of Deleted Records in a Postgre SQL Database

Seonghwan Kim and Kwangsik Chung
Additional contact information
Seonghwan Kim: Department of Computer Science, Graduate School of Korea National Open University, Seoul, South Korea
Kwangsik Chung: Department of Computer Science, Graduate School of Korea National Open University, Seoul, South Korea

International Journal of Technology and Engineering Studies, 2017, vol. 3, issue 4, 159-168

Abstract: As more and more information is being handled in enterprise IT environments, database utility has been increasing accordingly. With the increased use of databases, there is a high possibility that database records will need to be utilized as evidence, as in the case of IT-related crimes. There has been a growing need for the recovery of both maliciously deleted and ordinarily deleted records in order to use database records as legal evidence. Research on the methods of record restoration has only been carried out in regard to certain Database Management Systems (DBMS) [1], [2], [3], [4]. However, even though it is open source, research on the record restoration method for PostgreSQL has not been performed. This paper recommends recovery methods for records deleted from PostgreSQL. When recovering deleted records, PostgreSQL data files, which contain a history of deleted records, are required. Also, a Hex editor is used, which is able to check the contents of data files. One can analyze each record’s header information by opening PostgreSQL data files with a Hex editor. Then, the analyzed header information from the records is checked. If it is deemed that there are deleted records, they can be extracted for recovery. If VACUUM, which is a record cleanup program offered by PostgreSQL, has been used for deletion, the records cannot be restored. In this study, it was possible to recover the deleted records of the PostgreSQL database in the damages caused by cybercrime. Recovered records can be used as legal evidence, which can be beneficial to companies in court situation. The benefit of being in a court situation helps protect the interests of the enterprise.

Keywords: PostgreSQL; Record; Delete; Recovery; Forensic (search for similar items in EconPapers)
Date: 2017
References: Add references at CitEc
Citations:

Downloads: (external link)
https://kkgpublications.com/technology-engineering-studies-volume-3-issue-4/ (application/pdf)
https://kkgpublications.com/wp-content/uploads/2018/09/ijtes.3.40005.4.pdf (text/html)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:apa:ijtess:2017:p:169-176

DOI: 10.20469/ijtes.3.40005-4

Access Statistics for this article

International Journal of Technology and Engineering Studies is currently edited by PROF.IR.DR.Mohid Jailani Mohd Nor

More articles in International Journal of Technology and Engineering Studies from PROF.IR.DR.Mohid Jailani Mohd Nor Calle Alarcon 66, Sant Adrian De Besos 08930, Barcelona Spain.
Bibliographic data for series maintained by PROF.IR.DR.Mohid Jailani Mohd Nor ().