Database Backup Research Articles

Database Security Mechanisms in MySQL

MySQL security is a concept that originates from database security and mainly comprises attacks that exploit database systems vulnerabilities. SQL injection, inference attack, passive attack, active attack, and other database side attacks are general security issues in many modern database systems. Those methods are used by hackers to retrieve, manipulate, misuse, make or delete information in organizations’ relational databases through application layer or backend layer. Different techniques to prevent MySQL against these attacks investigated and discussed in this article. Besides, different ways to secure or database were introduced. In this article, different ways to protect the data in relational databases including database backups, database and table locking, database encryption, user control, MySQL Enterprise Firewall, and use of views are discussed. Furthermore, each protection method explained with their usages and advantages. Database designers have to be aware of these methods to increase data protection on their designed information management systems. The goals of this research are to cover all security problems that occur in MySQL backend, declaring the security vulnerabilities and providing suggestions to improve MySQL security and preventing an attacker from attacking these systems.

Digital Forensics Readiness Framework (DFRF) to Secure Database Systems

Database systems play a significant role in structuring, organizing, and managing data of organizations. In this regard, the key challenge is how to protect the confidentiality, integrity, and availability of database systems against attacks launched from within and outside an organization. To resolve this challenge, different database security techniques and mechanisms, which generally involve access control, database monitoring, data encryption, database backups, and strong passwords have been proposed. These techniques and mechanisms have been developed for certain purposes but fall short of many industrial expectations. This study used the design science research method to recommend a new Digital Forensic Readiness Framework, named DFRF, to secure database systems. DFRF involves risk assessments, data classification, database firewalls, data encryption, strong password policies, database monitoring and logging, data backups and recovery, incident response plans, forensic readiness, as well as education and awareness. The proposed framework not only identifies threats and responds to them more effectively than existing models, but also helps organizations stay fully compliant with regulatory requirements and improve their security. The design of the suggested framework was compared with existing models, confirming its superiority.

Implementation of the Personnel Management Information System for the Tangerang Regency Regional Civil Service Agency

The research aims to design and build a personnel database application program at the Tangerang Regency Regional Personnel Agency (BKD) using the Visual Basic 6.0 program. The data collection methods used were interviews, literature, and documentation. Once the data required to create the program is sufficient, the program creation process continues with preparing equipment and materials and designing forms and databases. The research results show that the program design consists of data entry processes, data search, and reports. To ensure data security, access rights are differentiated for each user. Apart from that, the application program is equipped with a database backup program that will duplicate the main database file into another directory. To make it easier to distribute reports, the application program is equipped with reports designed with Crystal Report 8.5, so that users just press the printer icon to print the document. The appearance of the program is quite simple but in terms of how to use the program, it needs special attention. Therefore, users need to read how to use the program which can be found in the Help file on the Installation CD. After testing, the designed program can be used to apply to the research object

Forensic Web Analysis on The Latest Version of Whatsapp Browser

With the rapid growth of technology and the increasing number of smartphone users, social media applications have proliferated. Among them, WhatsApp has emerged as the most widely used application, with over a quarter of the world's population using it since 2009. To meet the increasing customer demands, WhatsApp has introduced a browser version, which has undergone continuous updates and improvements. The latest version of WhatsApp exhibits significant differences in features and settings compared to its predecessors, particularly in conversations, images, video recordings, and other aspects. Consequently, this research focuses on analyzing artifacts that can aid in forensic investigations. The study aims to extract artifacts related to conversation sessions, as well as media data such as audio files, contact numbers, photos, videos, and more. To achieve these objectives, various forensic tools will be employed to assist in the artifact search within the WhatsApp browser. The research adopts the NIST framework and utilizes forensic techniques like Autopsy and FTK Imager to read encrypted backup database files. These files contain valuable information such as deleted conversations, phone logs, photos, videos, and other data of interest. Analyzing the artifacts from the WhatsApp browser version contributes to forensic activities, providing valuable insights into the evidence that can be obtained from conversations and media files. By leveraging forensic tools and techniques, forensic practitioners can effectively retrieve and analyze data from the encrypted backup database files. In summary, this research explores the artifacts within the WhatsApp browser version, sheds light on its distinct features, and presents a forensic approach utilizing the NIST framework and forensic tools like Autopsy and FTK Imager to examine encrypted backup database files containing crucial deleted data, conversations, and media files.

Backup Encryption and Encrypted Backup Operation Performance in SQL Server

Database security features are important ceses to be focused on database system development. However, using security features can affect the system's performance. Encryption database backup is a kind of security algorithm option, that includes keys and certificates. It is essential for additional layer of security. This study aims to observe how Transparent Data Encryption (TDE) feature, as a solution tool for data security on Microsoft SQL Server, will impact the database performance. In this study, there will be an overview of database backup encryption and encrypted backup operation through backup testing in SQL Server. Hence, the research will be conducted on backup testing for monitoring database system's performance when implementing TDE solution. The study will contribute to the literature with using backup encryption algorithms in SQL Server in terms of efficiency and benchmarking of encrypted backup operation performance with TDE by finding how significant performance change is happening.

Purging Compliance from Database Backups by Encryption

Data compliance laws establish rules intended to protect privacy. These define both retention durations (how long data must be kept) and purging deadlines (when the data must be destroyed in storage). To comply with the laws and to minimize liability, companies must destroy data that must be purged or is no longer needed. However, database backups generally cannot be edited to purge ``expired'' data and erasing the entire backup is impractical. To maintain compliance, data curators need a mechanism to support targeted destruction of data in backups. In this paper, we present a cryptographic erasure framework that can purge data from across database backups. We demonstrate how different purge policies can be defined through views and enforced without violating database constraints.

Research and Practice on Security Protection and Disaster Recovery Strategy of Oracle Database in Colleges and Universities

Database security protection, database backup and disaster recovery are important tasks for all colleges and universities to ensure the safe and stable operation of information systems. Based on the operating environment of the Oracle production database in China University of Geosciences (Beijing), combined with the practical operation and maintenance experience, this paper provides a design and implementation case of Oracle database security protection system and disaster recovery architecture. The network security protection architecture of the three-layer firewall and fortress machine, the detection and repair of security vulnerabilities, the management of system accounts and permissions, data encryption and database audit constitute the security protection system of the database. Oracle RAC (Real Application Clusters), Oracle DataGuard, redundant backup management and backup recovery constitute the disaster recovery architecture of the database. The case has practical significance for database operation and maintenance management in other colleges and universities.

Layanan Mandiri di Perpustakaan SMA Negeri 5 Magelang: Menjawab Tantangan Generasi Milenial

School library is a library located in a school that shelters it. The library has the main objective, namely to support teaching and learning activities. In the current era, pemustaka in senior high schools (SMA) are users who are classified as the millennial generation. Millennial generation has characteristic of making technology a lifestile. Millennials want speed in their every life. The speed at which they wanted made them prefer something simple. Millennials are also more comfortable using technology so that they can do things independently and in a structured manner. Libraries need to innovate in providing services to visitors to match the characteristics of the millennial generation. SMA Negeri 5 Magelang Library implements independent services in responding to the challenges of the millennial generation. The implementation of self-service in the SMA Negeri 5 Magelang Library can be said to be easy and simple. However, there is a need for hardware upgrades so that self-service can run better. It should also be noted regarding security and librarians must be diligent in doing database backups so that at any time when a problem occurs, the data is well preserved.

Electronic crash reporting: Implementation of the Model Minimum Uniform crash Criteria (MMUCC) and crash record life cycle comparison

Electronic crash records have become the standard crash reporting method in most states, but crash report elements vary between states and there is little publicly available information detailing the data provenance and life cycles for these records. As crash report granularity increases, proper data management is critical to ensure report quality with minimal errors. States are encouraged to meet federal standards for minimum crash report elements detailed in the Model Minimum Uniform Crash Criteria. MMUCC standardization helps states manage long-term crash data, enables multi-state analysis, and promotes sound traffic safety policies. This paper details how the states of Alabama and Wisconsin manage crash reports by evaluating their compliance with MMUCC standards as well as tracking the life cycle of crash reports in the two states from provenance, through approval and validation processes, to preservation as official records. A web-based MMUCC Compliance Tool was developed using elements from Alabama and Wisconsin crash reports, and aids other states in mapping existing crash report elements to MMUCC standards. The tool uses an automated check to map crash report elements and flags missing elements. The output of the tool includes a report detailing changes needed for the crash report to more closely align with the MMUCC standards. Common crash report lifecycle elements in Alabama and Wisconsin were identified, including initial web service validations, supervisor review, transactional database backups, linkage to driver record systems, and processes in place to manage and fix void requests. To aid crash recording procedures nationwide, a set of best practices for crash report lifecycle management is synthesized from the analysis.

Design and Implementation of Embedded Database Security and Reliability

This article analyzes the classification of common embedded databases, including SQLite embedded database, Berkeley embedded database, eXtreme DB embedded database, OpenBASE Lite, etc. By studying data replication and backup, embedded database recovery, embedded database backup design, detailed backup design and implementation, the purpose of this article is to improve the security of the database application process and the integrity of the information stored in the database.

Optimizing Git for handling database backups: findings and insights from another 6,000 hours of experimentation

This is the second in a series of papers detailing results from on-going investigations of using Git - a distributed source control system - as a database backup and disaster recovery tool. The first paper, published early 2017 after 2,000 hours of data processing and simulations, warns that the default configuration of Git is unsuitable for database backups, but also shares configuration tweaks that make it safe and more space-efficient than zipped .sql archives - as low as only 1% of the storage space needed by .sql archives. This second paper focuses on optimization, looking specifically to identify which configuration tweaks and factors affect the reliability, scalability and efficiency of a Git-based database backup and disaster recovery system. Critical insights regarding the reliability and scalability of a Git-based database backup system were found after 6,000 hours of experimentation, centered around the problem of configuring Git to be able to handle .sql files measured in gigabytes.

Design and implementation of web-based internship information system at vocational school

Information technology has been used as a means of communication in vocational schools but its optimal utilization in internship programs is still low. This study aims to design web-based internship information system. The method used to collect quantitative data in this study is the Design Science Research Methods (DSRM), namely research that produces products and services information systems. The research flow starts from requirement analysis, design, implementation and system testing. The system is built using interactive website technology based on four major components namely students, supervisors, industry and coordinators. The web-based internship system contains information features, schedules, signups, daily journals, portfolio reports, final reports, database backup and guidance systems. PHP, Bootstrap, CSS, HTML, JavaScript, MySQL database and Apache web server is a technology used to develop web-based internship information system. The results show that the resulting system can be used as support for the internship program for all parties involved. This system can facilitate students, supervisors and coordinators in the implementation of internship programs.

A Design of Medical Information Sharing Model Based on Blockchain Technology

Through the studying of the status quo of medical industry, we find some problems with the sharing of medical data. The medical data in traditional medical institution is stored on severs and its backup database, resulting in lack of communication among medical institutions and ineffective use of medical resources. In order to solve this problem, we propose a medical information sharing model based on blockchain technology. In this model, we build a p2p network to connect different medical institutions and other nodes. Meanwhile, we establish two associated blockchain to store medical data digests and requests. Each node in the p2p network can search the medical information in the distributed medical institutions. In this way, we have integrated medical data between medical institutions and improved the transparency and sharing of medical data. Also, we improve the traditional POW (power of work) algorithm, by using the double-chain structure, we reduce the confirmation time of a block.

Recording Conservation Information: The MARC 583 Field in Practice

Conservation documentation provides important information about a library’s collections, including condition assessments and treatment decisions. Paper files or local databases, however, can make this information unavailable to most library staff and create problems for searching and preservation. To avoid these problems, in 2016, Pennsylvania State University (Penn State) started using the MARC 583 field to record conservation documentation for items in the Special Collections Library. By placing this information in the catalog record, conservation information was publicly viewable, searchable, and protected by regular database backups. This article describes the process of implementing the MARC 583 field at Penn State for conservation documentation, including selecting standards, encoding the field, and outcomes from the project.

Files synchronization from a large number of insertions and deletions

Synchronization between different versions of files is becoming a major issue that most of the applications are facing. To make the applications more efficient a economical algorithm is developed from the previously used algorithm of “File Loading Algorithm”. I am extending this algorithm in three ways: First, dealing with non-binary files, Second backup is generated for uploaded files and lastly each files are synchronized with insertions and deletions. User can reconstruct file from the former file with minimizing the error and also provides interactive communication by eliminating the frequency without any disturbance. The drawback of previous system is overcome by using synchronization, in which multiple copies of each file/record is created and stored in backup database and is efficiently restored in case of any unwanted deletion or loss of data. That is, to introduce a protocol that user B may use to reconstruct file X from file Y with suitably low probability of error. Synchronization algorithms find numerous areas of use, including data storage, file sharing, source code control systems, and cloud applications. For example, cloud storage services such as Drop box synchronize between local copies and cloud backups each time users make changes to local versions. Similarly, synchronization tools are necessary in mobile devices. Specialized synchronization algorithms are used for video and sound editing. Synchronization tools are also capable of performing data duplication.

DOMe: A deduplication optimization method for the NewSQL database backups.

Reducing duplicated data of database backups is an important application scenario for data deduplication technology. NewSQL is an emerging database system and is now being used more and more widely. NewSQL systems need to improve data reliability by periodically backing up in-memory data, resulting in a lot of duplicated data. The traditional deduplication method is not optimized for the NewSQL server system and cannot take full advantage of hardware resources to optimize deduplication performance. A recent research pointed out that the future NewSQL server will have thousands of CPU cores, large DRAM and huge NVRAM. Therefore, how to utilize these hardware resources to optimize the performance of data deduplication is an important issue. To solve this problem, we propose a deduplication optimization method (DOMe) for NewSQL system backup. To take advantage of the large number of CPU cores in the NewSQL server to optimize deduplication performance, DOMe parallelizes the deduplication method based on the fork-join framework. The fingerprint index, which is the key data structure in the deduplication process, is implemented as pure in-memory hash table, which makes full use of the large DRAM in NewSQL system, eliminating the performance bottleneck problem of fingerprint index existing in traditional deduplication method. The H-store is used as a typical NewSQL database system to implement DOMe method. DOMe is experimentally analyzed by two representative backup data. The experimental results show that: 1) DOMe can reduce the duplicated NewSQL backup data. 2) DOMe significantly improves deduplication performance by parallelizing CDC algorithms. In the case of the theoretical speedup ratio of the server is 20.8, the speedup ratio of DOMe can achieve up to 18; 3) DOMe improved the deduplication throughput by 1.5 times through the pure in-memory index optimization method.

Adaptive Fault Detection Technology Research Based on Distributed Database Disaster

Distributed storage systems demonstrate superior performance in terms of capacity, I/O throughput and scalability, but the reliability of inexpensive components is not high, and it is easy to cause catastrophic consequences of data loss. Fault detection is a key technology to provide high availability for distributed system, the new adaptive fault detection system architecture is proposed in this paper, which considered availability and disaster recovery ability, is divided into four levels: 1) Client layer: in this layer, customers can keep in touch with local network or outside network disaster recovery/backup center; 2) Server layer: in this layer, the high availability is guaranteed by its backup scheme; 3) Local recovery layer: in this layer, data backup and recovery are realized through local real-time replication; 4)Remote recovery layer: in this layer, data backup and recovery are realized (delayed) through remote backup database. And we evaluated and tested this method in our lab network environment.

Research on Database Remote Disaster Recovery and Backup Technology Based on Multi Point and Multi Hop

Research on Database Remote Disaster Recovery and Backup Technology Based on Multi Point and Multi Hop

Aplikasi Pembayaran Administrasi Siswa Pada SMK Al Falah Songgom Brebes dengan Visual Basic

Advancement of information systems and rapid technological support the advancement of an institution or agency. Applications of payment Administration vocational students Al Falah Songgom Brebes with Visual Basic is expected to provide benefits for the finance department to manage the administration of the student, so that the work can be completed quickly and to minimize mistakes that often occur in data processing and saves storage space. This study aims to build an administration payment student information system that is focused on the administration of student data processing payments. Applications of payment Administration vocational students Al Falah Songgom Brebes with Visual Basic was built by using Software Development Life Cycle (SDLC) that is by using the waterfall model. Administration payment student information system is built by using Visual Basic 6.0, MySQL for its database design, as well as Active Dynamic Data Report. Administration payment student information system includes the design of the system login screen, main menu form, the form data input majors, student data input form, form registration, form registration details, form of payment details, form of payment types, forms and database backup reporting form includes reports monthly and daily. From the test results information system has been able to help the finance department in managing financial administration students at SMK Al Falah Songgom Brebes and can be further developed into a better system again. Keywords: Applications of payment Administration, SDLC, Waterfall.Visual Basic 6.0, MySQL, Active Report

Technologies and Methods for Auditing Databases

Abstract This paper aims at identifying and presenting tools and techniques to help perform IT database audit. The study summarizes the issues relating to the national and international IT audit regulations. It highlights the key differences between audit and other forms of economic audit (e.g. financial, internal or statutory). The paper presents the main components of IT audit, namely data center audit, computer network audit, operating system audit, Internet servers audit, database auditing, application auditing, external access flows IT audit (e.g. radio access, access from mobile devices). Practical aspects of the study describe database auditing as an important element of IT audit process. Current trends are presented for processing and storing data in relationship with data storage centers, cloud processing and inclusion of mobile devices as data access terminals. The author makes a presentation of database components that are relevant to database audit. Database audited components concern: file system database, data dictionary, database objects, database customer analysis, data protection and backup system, security and data protection from database. The last part of the paper is dedicated to preparing a new practical approach regarding the audit steps and technical means used in databes auditing. Finally, the author emphasizes the importance of database auditing, of data security and of the need to develop new technical auditing methods which are to be in consensus with the rapid development of Information Technology.