Deleted Records Recovery Method for MySQL MyISAM Database
- 주제(키워드) MySQL MyISAM Database , Record Recovery , Digital Forensics
- 발행기관 고려대학교 정보보호대학원
- 지도교수 이상진
- 발행년도 2016
- 학위수여년월 2016. 2
- 학위구분 석사
- 학과 정보보호대학원 정보보호학과
- 원문페이지 70 p
- 실제URI http://www.dcollection.net/handler/korea/000000065822
- 본문언어 영어
- 제출원본 000045867193
초록/요약
Currently MySQL database is used by many users and It has gained a big market share in the database market. Even though MyISAM storage engine was used as a default storage engine before, but records recovery method does not existed. Deleted records have a high possibility for important evidence, however, it is almost impractical for investigators to examine large amonts of database by themseleves in manual method. This paper suggests the universal recovery method for deleted records and also present the experimental results.
more목차
1. Introduction 1
2. Related Works 2
2.1. MySQL Database Research Trends 2
2.2. MySQL Data Types 2
3. MySQL MyISAM Database Structure Analysis 3
3.1. FRM File Analysis 3
3.1.1. FRM File Structure 3
3.1.2. FRM Header 4
3.1.3. Key & Index Information Area 7
3.1.4. Column Information Area 8
3.1.5. Column Name Area 1 9
3.1.6. Column Metadata Area 12
3.1.7. Column Name Area 2 14
3.1.8. Set & Enum Metadata Area 15
3.2. MYI File Analysis 17
3.2.1. MYI File Structure 17
3.2.2. State Section 18
3.2.3. Base Section 23
3.2.4. Keydef Section 24
3.2.5. Recinfo Section 26
3.2.6. Key Values Area 26
3.3. MYD File Analysis 26
3.3.1. Structure of Fixed Table 26
3.3.2. Structure of Fixed Record 27
3.3.3. Structure of Dynamic Table 42
3.3.4. Structure of Dynamic Record 42
3.4. Structure of Deleted Record 47
3.4.1. Fixed Table 47
3.4.2. Dynamic Table 48
4. Deleted Record Recovery 49
4.1. Fixed Table Recovery 49
4.2. Dynamic Table Recovery 49
5. Implementation and Performance Evaluation 53
5.1. Experimental Environment 53
5.2. Result of Experiment 53
5.3. Recovery of Actual Data 54
6. Conclusions and Future Plan 56
