Skip navigation

Stefan Kimak

PhD in Computer Science and Digital Technologies

This thesis presents an analysis of, and enhanced security model for IndexedDB, the persistent HTML5 browser based data store.

This thesis firstly argues that IndexedDB is insecure by design. That is, the design of IndexedDB means that every implementation is vulnerable to attacks such as Cross Site Scripting, and even data from databases that have been deleted may readily be stolen using appropriate software tools. This is demonstrated experimentally on both mobile and desktop browsers. IndexedDB is however capable of very high performance levels.This is demonstrated through the development of a formal performance model.

In the final component of this thesis, we propose and implement security enhancement that corrects the weaknesses in IndexedDB local storage. The enhancement uses multi factor authentication, and so is resistant to Cross Site Scripting attacks. This enhancement is then demonstrated experimentally, showing HTML5 IndexedDb may be securely used both on and offline.

Research Supervisors

  • Dr. Jeremy Ellman
  • Ms Shelagh Keogh

Key Publications

Some potential issues with the security of HTML5 indexedDB. / Conference paper

Performance Testing and Comparison of Client Side Databases Versus Server Side. / Conference paper

An Investigation into Possible Attacks on HTML5 IndexedDB and their Prevention. / Conference paper


a sign in front of a crowd

Northumbria Open Days

Open Days are a great way for you to get a feel of the University, the city of Newcastle upon Tyne and the course(s) you are interested in.

a person sitting at a table using a laptop
NU World Virtual Tours

Virtual Tour

Get an insight into life at Northumbria at the click of a button! Come and explore our videos and 360 panoramas to immerse yourself in our campuses and get a feel for what it is like studying here using our interactive virtual tour.

Latest News and Features

THE Impact rankings
Architecture Apprenticeship Handbook cover
Pictured from left to right are Northumbria University academics Dr Qiang Wu, Dr Juna Sathian, Professor Zabih Ghassemlooy, Dr Yongtao Qu and Dr Xicong Li.
Insights North East
gettyimages/Kobus Louw
Felicia Gottman
More news
More events

Upcoming events

Towards Relational Public Services Conference 2024
Northumbria University IP Showcase Event 2024
Advanced Clinical Practice: Addressing the challenges in Primary Care

Back to top