Securing Node Applications

Preface

The frequent data breaches and attacks on web applications in recent years have plagued startups and large, high-profile organizations alike. Although the rate of security incidents is on the rise, based on the analysis of 64,199 security incidents and 2,260 breaches in 2015, the Verizon Data Breach Investigations Report published that the top 10 vulnerabilities accounted for 85 percent of these successful exploits. These findings were also in line with the results from earlier years, thus revealing that hackers use what works, and what works doesn’t seem to change all that often.

Securing web applications against these frequently occurring critical risks is the most effective first step toward producing secure code. The OWASP Top 10 is a community-driven, consensus-based list of such commonly occuring, most-critical web application security risks.

This book covers the OWASP Top 10 security risks (2013 Edition) as they pertain to the Node.js web applications.

How This Book Is Organized

This book contains a chapter for each of the Open Web Application Security Project (OWASP) Top 10 vulnerabilities. Each chapter contains primarily two sections:

• Explanations of how malicious actors conduct attacks. This helps application builders to understand the scenarios to consider while coding the application.

• Specific measures to prevent the attack and its implementation in Node.js.

To further aid learning, references to additional reading resources and examples of related vulnerabilities ...