{"id":"https://openalex.org/W4416925989","doi":"https://doi.org/10.1109/access.2025.3639429","title":"Cloud Database Forensics in Practice: Structural Challenges and Investigative Lessons From Azure SQL Database","display_name":"Cloud Database Forensics in Practice: Structural Challenges and Investigative Lessons From Azure SQL Database","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416925989","doi":"https://doi.org/10.1109/access.2025.3639429"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3639429","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3639429","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3639429","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055766787","display_name":"Jiho Shin","orcid":"https://orcid.org/0000-0002-2697-8221"},"institutions":[{"id":"https://openalex.org/I323440827","display_name":"Korean National Police University","ror":"https://ror.org/02s89kd69","country_code":"KR","type":"education","lineage":["https://openalex.org/I323440827"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jiho Shin","raw_affiliation_strings":["Police Science Institute, Korean National Police University, Asan, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-2697-8221","affiliations":[{"raw_affiliation_string":"Police Science Institute, Korean National Police University, Asan, South Korea","institution_ids":["https://openalex.org/I323440827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120678752","display_name":"Byoung Hun Moon","orcid":"https://orcid.org/0009-0008-5002-0014"},"institutions":[{"id":"https://openalex.org/I848706","display_name":"Sungkyunkwan University","ror":"https://ror.org/04q78tk20","country_code":"KR","type":"education","lineage":["https://openalex.org/I848706"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Byoung Hun Moon","raw_affiliation_strings":["Department of Forensics, Sungkyunkwan University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0009-0008-5002-0014","affiliations":[{"raw_affiliation_string":"Department of Forensics, Sungkyunkwan University, Seoul, South Korea","institution_ids":["https://openalex.org/I848706"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.46718802,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"204168","last_page":"204178"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7990999817848206},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.7461000084877014},{"id":"https://openalex.org/keywords/sql","display_name":"SQL","score":0.5138999819755554},{"id":"https://openalex.org/keywords/transaction-log","display_name":"Transaction log","score":0.490200012922287},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.4544000029563904},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4194999933242798},{"id":"https://openalex.org/keywords/data-deduplication","display_name":"Data deduplication","score":0.3944000005722046},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.3840999901294708}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8065999746322632},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7990999817848206},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.7461000084877014},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.5924000144004822},{"id":"https://openalex.org/C510870499","wikidata":"https://www.wikidata.org/wiki/Q47607","display_name":"SQL","level":2,"score":0.5138999819755554},{"id":"https://openalex.org/C2212953","wikidata":"https://www.wikidata.org/wiki/Q948454","display_name":"Transaction log","level":3,"score":0.490200012922287},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.4544000029563904},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4194999933242798},{"id":"https://openalex.org/C32587265","wikidata":"https://www.wikidata.org/wiki/Q1182260","display_name":"Data deduplication","level":2,"score":0.3944000005722046},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.3840999901294708},{"id":"https://openalex.org/C2778974508","wikidata":"https://www.wikidata.org/wiki/Q2499178","display_name":"Cloud database","level":3,"score":0.37450000643730164},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.35899999737739563},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.3199000060558319},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30970001220703125},{"id":"https://openalex.org/C529754248","wikidata":"https://www.wikidata.org/wiki/Q1054772","display_name":"Data recovery","level":2,"score":0.30790001153945923},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.3019999861717224},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2985999882221222},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.295199990272522},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.29249998927116394},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2718000113964081},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2718000113964081},{"id":"https://openalex.org/C120115606","wikidata":"https://www.wikidata.org/wiki/Q5135723","display_name":"Cloud testing","level":4,"score":0.26759999990463257},{"id":"https://openalex.org/C72108876","wikidata":"https://www.wikidata.org/wiki/Q844565","display_name":"Transaction processing","level":3,"score":0.2632000148296356}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3639429","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3639429","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:1080ff2bb69b45f6bdb5884d13d1399c","is_oa":true,"landing_page_url":"https://doaj.org/article/1080ff2bb69b45f6bdb5884d13d1399c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 204168-204178 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3639429","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3639429","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3779686176","display_name":null,"funder_award_id":"RS-2025-02218280","funder_id":"https://openalex.org/F4320334869","funder_display_name":"Korean National Police Agency"},{"id":"https://openalex.org/G3953331873","display_name":null,"funder_award_id":"No. RS-2025-02218280","funder_id":"https://openalex.org/F4320334869","funder_display_name":"Korean National Police Agency"}],"funders":[{"id":"https://openalex.org/F4320333817","display_name":"Advanced Science and Technology Institute","ror":null},{"id":"https://openalex.org/F4320334869","display_name":"Korean National Police Agency","ror":"https://ror.org/05x57gp50"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Cloud":[0],"database":[1],"forensics":[2],"faces":[3],"fundamental":[4],"structural":[5,33,83,169],"challenges":[6],"that":[7,106,135],"differ":[8],"from":[9,51],"traditional":[10],"on-premises":[11],"environments.":[12,185],"This":[13],"study":[14,80,164],"experimentally":[15],"investigates":[16],"how":[17],"three":[18],"representative":[19],"recovery":[20,57,77,119,137],"techniques\u2014transaction":[21],"log":[22,108],"analysis,":[23],"data":[24],"page":[25],"inspection,":[26],"and":[27,55,117,154,159,175],"buffer":[28],"pool":[29],"analysis\u2014operate":[30],"under":[31],"the":[32,56,86,125,147],"constraints":[34],"of":[35,59,98,168],"Azure":[36],"SQL":[37],"Database.":[38],"A":[39],"controlled":[40],"deletion":[41],"scenario":[42],"was":[43,62],"designed":[44],"in":[45,143,171,183],"which":[46],"specific":[47],"records":[48],"were":[49],"removed":[50],"a":[52,89],"sample":[53],"table,":[54],"feasibility":[58],"each":[60],"technique":[61],"examined":[63],"using":[64],"native":[65],"Structured":[66],"Query":[67],"Language":[68],"(SQL)":[69],"diagnostic":[70],"commands.":[71],"Rather":[72],"than":[73],"simply":[74],"reapplying":[75],"existing":[76],"methods,":[78],"this":[79],"demonstrates":[81],"their":[82],"non-applicability":[84,170],"within":[85],"Platform":[87],"as":[88],"Service":[90],"(PaaS)-based":[91],"cloud":[92,144,160,172,184],"environment,":[93],"thereby":[94],"establishing":[95],"empirical":[96],"evidence":[97,167],"an":[99],"unexplored":[100],"forensic":[101,151,173],"limitation.":[102],"The":[103,163],"results":[104],"show":[105],"transaction":[107],"analysis":[109],"remains":[110],"partially":[111],"accessible":[112],"but":[113],"ephemeral,":[114],"while":[115],"page-":[116],"memory-based":[118],"approaches":[120],"are":[121],"structurally":[122],"restricted":[123],"by":[124],"PaaS":[126],"architecture,":[127],"making":[128],"complete":[129],"reconstruction":[130],"infeasible.":[131],"These":[132],"findings":[133],"demonstrate":[134],"conventional":[136],"procedures":[138,174],"cannot":[139],"be":[140],"directly":[141],"replicated":[142],"databases,":[145],"highlighting":[146],"need":[148],"for":[149,179],"new":[150],"readiness":[152],"strategies":[153],"institutional":[155],"cooperation":[156],"between":[157],"investigators":[158],"service":[161],"providers.":[162],"provides":[165],"practical":[166],"offers":[176],"policy-level":[177],"implications":[178],"trustworthy":[180],"digital":[181],"investigations":[182]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-12-02T00:00:00"}