What Is Lurking in Your Backups? - ICT Systems Security and Privacy Protection
Conference Papers Year : 2021

What Is Lurking in Your Backups?

Ben Lenard
  • Function : Author
  • PersonId : 1154390
Alexander Rasin
  • Function : Author
Nick Scope
  • Function : Author
James Wagner
  • Function : Author

Abstract

Best practices in data management and privacy mandate that old data must be irreversibly destroyed. However, due to performance optimization reasons, old (deleted or updated) data is not immediately purged from active database storage. Database backups that typically work by backing up table and index pages (rather than logical rows) greatly exacerbate the privacy problem of the old surviving data. Copying such deleted data into backups ensures that unknown quantities of old data can be stored indefinitely.In this paper, we quantify the amount of deleted data retained in backups by four major representative databases, comparing the default behavior versus an explicit defrag operation. We review the defrag options available in these databases and discuss the impact they have on eliminating old data from backups. We demonstrate that each database has a defrag mechanism that can eliminate most of old deleted data (although in Oracle pre-update content may survive defrag). Finally, we outline the factors that organizations should consider when deciding whether to apply defrag prior to executing their backups.
Fichier principal
Vignette du fichier
512098_1_En_26_Chapter.pdf (1.04 Mo) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03746032 , version 1 (04-08-2022)

Licence

Identifiers

Cite

Ben Lenard, Alexander Rasin, Nick Scope, James Wagner. What Is Lurking in Your Backups?. 36th IFIP International Conference on ICT Systems Security and Privacy Protection (SEC), Jun 2021, Oslo, Norway. pp.401-415, ⟨10.1007/978-3-030-78120-0_26⟩. ⟨hal-03746032⟩
14 View
40 Download

Altmetric

Share

More