Research On Mysql Database Forensics Algorithm Based On Log Analysis

More extensive use of the My SQL database, My SQL database forensics issues are becoming increasingly important. Currently, the effective forensic methods of My SQL database is by analyzing the principle of Inno DB storage engine or by analyzing the redo log of Inno DB storage engine to achieve. These methods are only applicable to the database that use of the Inno DB storage engine, My SQL database can supports a lot storage engine, So these methods do not have universal applicability for My SQL.Log is the most important basis information of database forensics,My SQL database log records all the information of Users operations. By studying the principles of My SQL data storage and logging principles, by analyzing the My SQL binary log structure, and by using KMP algorithm that using keyword matching My SQL binary logs to retrieve the information we need, presented My SQL database forensics algorithm based on log analysis. Experimental results demonstrate the effectiveness of the algorithm.On the basis of My SQL database forensics algorithm based on log analysis, this paper programming implements the My SQL database forensics system that based on log analysis. The System can automatically find log files of My SQL database, and can be the forensics to the key data of My SQL database. it solves the My SQL database forensics issues of illegal modifications.