Securing your nodejs deployments while you sleep

6932fd8236cec12354ba8230c0e80d81?s=47 Ahamed Nafeez
September 19, 2014

Securing your nodejs deployments while you sleep

JSFoo 2014, Bangalore.

Developers push code at a much faster rate, that your security engineers don’t have enough time to take a look at them. Most of the vulnerabilites like XSS & CSRF comes in to existence when developers try to bring the next uber feature live, by not giving much attention to security or one of them is simply not aware of writing secure code. It has been a problem which is worrying most of the startups and organizations recently. In spite of having a secure framework which inherently takes care of most common security issues, it becomes a nightmare for security engineers / testers to take a look at every code commit for a vulnerability in their code. This talk is about automating the process of finding insecure code pushes for Nodejs deployments.

6932fd8236cec12354ba8230c0e80d81?s=128

Ahamed Nafeez

September 19, 2014
Tweet