Development and validation of a database forensic metamodel (DBFM)

• Main Authors: Al Dhaqm, A., Razak, S., Othman, S. H., Ngadi, A., Ahmed, M. N., Mohammed, A. A.
• Format: Article
• Language: English
• Published: Public Library of Science 2017
• Subjects: QA76 Computer software
• Online Access: http://eprints.utm.my/id/eprint/74902/1/ArafatAlDaqm_DevelopmentandValidationofaDatabaseForensic.pdf; http://eprints.utm.my/id/eprint/74902/; https://www.scopus.com/inward/record.uri?eid=2-s2.0-85011396327&doi=10.1371%2fjournal.pone.0170793&partnerID=40&md5=603730c0d1da0b5fb12a6e30cfc2e791

Database Forensics (DBF) is a widespread area of knowledge. It has many complex features and is well known amongst database investigators and practitioners. Several models and frameworks have been created specifically to allow knowledge-sharing and effective DBF activities. However, these are often narrow in focus and address specified database incident types. We have analysed 60 such models in an attempt to uncover how numerous DBF activities are really public even when the actions vary. We then generate a unified abstract view of DBF in the form of a metamodel. We identified, extracted, and proposed a common concept and reconciled concept definitions to propose a metamodel. We have applied a metamodelling process to guarantee that this metamodel is comprehensive and consistent.