THE NODE.JS HIGHWAY: ATTACKS AT FULL …

THE NODE.JS HIGHWAY: ATTACKS AT FULL THROTTLE

Susan St.Clair, Solutions Architect

Checkmarx

Agenda

Agenda

? Architecture ? DoS ? Weak Crypto ? JSON "SQLi" ? Re-DoS ? App Re-Routing

Single Thread Architecture - Event Loop

Register Callback

Event Queue

Event Loop Single Thread

File System Database

Operation Complete Trigger Callback

Network

Event handler

Single Threaded Event Loop

Code.

What's it Good for?

? I/O intensive applications ? DB queries ? UI intensive applications

(many webapps)

? CPU intensive applications ? Complex business logic that

requires lots of calculations

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download