| 摘要 |
PROBLEM TO BE SOLVED: To provide, in the field of forensic analysis of databases, a method of performing database rollback to a previous state of a database using a write-ahead log (WAL).SOLUTION: A device 401 includes a memory 403 and a processor 402. The processor selects, from a set of frames recorded in a WAL 102, a specific frame representing specific revised content of a corresponding specific page; identifies, from the set of frames, a first subset of frames containing the specific frame and zero or more chronologically preceding frames; extracts a first subset of pages from a set of pages of a database 101; extracts a second subset of pages from corresponding pages of the first subset of frames; and performs rollback of the database 101 to a previous state containing the revised content of the specific page based on the content of the first subset of pages and revised content of the second subset of pages.SELECTED DRAWING: Figure 4 |
