On Dimensions of Reconstruction in Database Forensics

Although very little amount of research has been done on database forensics, current research has tacitly focused on digital examination and reconstruction of databases from a number of dimensions. The general assumption is that only one of these dimensions needs to be handled during database forensics investigations. This paper analyses the dimensions in which research in database forensics has been focused on and uses these to reveal the different aspects of database forensics which are yet to be explored. The paper also elaborates on the tools and techniques currently being used in database forensics analysis process and highlights some of the challenges being faced in database forensics research and practice as they relate to the dimensions implied by current research in database forensics.