摘要
SQLite是一个轻量级SQL数据库引擎,由于运行简单、功能强大,被广泛应用在手机短信、浏览器历史记录等各种应用中。在鉴定实践中也经常需要在SQLite的数据库文件中搜索查找特定内容,所以了解SQLite数据库文件结构非常重要。分析了SQLite数据库文件的结构,分析了android手机中的短信息文件的数据结构,以实际案例分析了被删除短信的搜索分析方法,这种检验分析的思路和方法对所有使用SQLite数据库的应用都是可以借鉴的。
As a simple and powerful lightweight SQL database engine, SQLite is widely used in short message and record of browser history. To understand the structure of SQLite database is of great importance in forensic practice, because searching specific contents in SQLite database is frequently required. This paper presents detailed analysis of SQLite and ＂mmssms.db＂ file＇s structure in Android phones. Examples are given to illustrate the method for acquiring information of deleted short mes sages from ＂mmssms.db＂ files through key words searching and structural analysis of SQLite, which is generally applicable in the forensic examination of SQLite files.
出处
《中国司法鉴定》
2013年第6期73-78,共6页
Chinese Journal of Forensic Sciences
