|
Title:
|
A SECURE AND CONFIDENTIAL JAVASCRIPT CRYPTO-FRAMEWORK FOR CLOUD STORAGE APPLICATIONS |
|
Author(s):
|
Thomas Lenz, Bernd Zwattendorfer, Arne Tauber |
|
ISBN:
|
978-989-8533-16-6 |
|
Editors:
|
Bebo White and Pedro Isaías |
|
Year:
|
2013 |
|
Edition:
|
Single |
|
Keywords:
|
JavaScript, Cloud Computing, Cryptography, Security, Confidentiality, Encryption |
|
Type:
|
Full Paper |
|
First Page:
|
219 |
|
Last Page:
|
226 |
|
Language:
|
English |
|
Cover:
|
|
|
Full Contents:
|
click to dowload 
|
|
Paper Abstract:
|
Cloud computing is currently one of the fastest growing segments in the ICT sector. Although cloud computing has many benefits, still some issues, particularly relating to security and privacy, can be identified and must not be ignored. Especially, if sensitive or personal data wants to be stored in the cloud, these data has to be highly protected from unauthorized access. To avoid unauthorized access, encryption can be used to keep the data confidential. Various approaches and implementations using encryption techniques to keep data confidential exist. However, all of them require some special client software, which has to be installed on the users local machine. To avoid such local binary installations, we propose a fully browser-based solution to encrypt data and store it securely in the cloud. The proposed solution relies on existing and already implemented web browser technologies, only. By the help of our solution, users can simply drag and drop files into their browser window to store them securely in the cloud. The proposed secure and confidential remote data-storage application is fully based on a JavaScript Crypto-Framework, which in turn relies on approved and wide-spread cryptographic standards for symmetric and asymmetric encryption. While the use of our solution provides a lot of benefits to users, we could also identify some limitations in terms of security. In a security analysis we discuss some general aspects of JavaScript cryptography, evaluate the security of our web-based encryption tool in detail, and introduce some measures to improve the security of browser-based cryptography. |
|
|
|
|
|
|
