NoteLocker: Simple Secure Storage Service

Over the past decade, the Web has been transformed from a collection of static HTML pages to a complex, distributed computing platform, as evidenced of the success are sites such as Facebook and YouTube. This transformation has been enabled primarily by the continuous development of Web applications. Inevitably-due to the Internet architecture-Web applications must rely on the servers so as to process and store confidential or user sensitive information. However, anyone who gains access to the server whether is a curious administrator, an attacker or even the government may obtain the data stored on the server or the server´s database. This paper investigates ways to improve client-side security, through encryption, to keep user data private in the face of threats of various Web server compromises. A Web Application for online-note taking named Note Locker has been developed for this purpose by combining not only multiple security mechanisms but also modern Web development techniques to achieve confidentiality, integrity and a high level of user experience. The application is developed using open source products and eliminates possible attacks such as eavesdropping, sniffing, wiretapping, man-in-the-middle, and session hijacking of sensitive data by encrypting the data on the client side before sent for storage on the server.