Node Security - NodeConf ONE-SHOT

Explore essential security principles for Node.js developers in this 19-minute conference talk from NodeConf ONE-SHOT at JSFest Oakland 2014. Delve into core security concepts, examine security within the Node ecosystem and Node core, and discover how to apply these principles to both open source and enterprise environments. Learn from past security challenges, stay current with present threats, and prepare for future vulnerabilities. Gain insights on confidentiality, integrity, input validation, and availability. Understand the importance of known vulnerabilities, audit logging, and conducting fire drills to enhance your security practices. Equip yourself with practical knowledge to become a frontline defender against software security threats in the Node.js landscape.

A Security Carol
The ghost of security past
Confidentiality
new Buffer
Integrity
Input Validation
Availability
The ghost of security present
node-website/pull/27
Known Vulnerabilities
The ghost of security future
Audit Logging
Run Fire drills