Главная
Study mode:
on
1
Introduction
2
Rails Infrastructure Team
3
Context
4
Denial of Service
5
Benchmarks
6
Algorithmic Complexity
7
Regex Example
8
Regular Expressions
9
State Machines
10
NFA vs DFA
11
Backtracking
12
How to Avoid
13
Outro
Description:
Explore the inner workings of regex denial of service (DoS) attacks in this 31-minute RailsConf 2022 talk. Dive into the CRuby regex engine to understand how regular expressions function and why certain string inputs can overwhelm your Rails application. Learn to identify vulnerable regex patterns, comprehend the CPU-intensive nature of these attacks, and discover effective strategies to protect your application from potential threats. Gain valuable insights into algorithmic complexity, state machines, NFA vs DFA, and backtracking to enhance your understanding of regex security in Rails development.

Service Denied! Understanding How Regex DoS Attacks Work

Ruby Central
Add to list
0:00 / 0:00