SockJS Intro
Download as ODP, PDF13 likes24,391 views
SockJS provides a WebSocket-like API that works across all browsers, including older browsers, by using multiple transport mechanisms as needed such as xhr-polling. It supports both client-side and server-side libraries for major platforms. While SockJS mimics the WebSocket API, it is simpler than solutions like Socket.IO that provide additional functionality beyond a raw protocol.
1 of 11
Downloaded 119 times
Ad
Recommended
Cyber Kill Chain.pptx
Cyber Kill Chain.pptxVivek Chauhan The Cyber Kill Chain describes the typical stages of a cyberattack: reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objective. Organizations can use this framework to understand attacks and develop defenses. They can also correlate security information and management (SIEM) data to detect attacks corresponding to each stage. Recommendations for prevention and detection include threat intelligence, malware analysis, email security, intrusion detection, access management, and incident response planning. The Cyber Kill Chain provides a high-level view, while the MITRE ATT&CK Framework details tactics and techniques, allowing comprehensive defenses.
The Incident Response Playbook for Android and iOS
The Incident Response Playbook for Android and iOSPriyanka Aash What is your mobile device incident response plan? If you cannot answer that question, you should attend this session. The session will cover the challenges in mobile, how and why it is different from traditional incident response, and the building blocks you can use to craft your own mobile incident response plan.
(Source: RSA USA 2016-San Francisco)
Intrusion detection
Intrusion detectionUmesh Dhital This document provides an overview of intrusion detection systems (IDS). It begins with an introduction that defines intrusion, intrusion detection, and IDS. It then discusses the history and typical scenarios of intrusions. The document outlines different types of attacks and what an IDS is supposed to do in detecting them. It classifies IDS based on detection approach and protected system, covering network/host-based detection. The advantages and disadvantages of different IDS types are presented. Commonly used open source and commercial IDS are listed, with Snort discussed in more detail. References for further information are provided at the end.
Heterogeneous Defect Prediction (
ESEC/FSE 2015)
Heterogeneous Defect Prediction (
ESEC/FSE 2015)Sung Kim This document describes a technique called Heterogeneous Defect Prediction (HDP) that aims to perform cross-project defect prediction even when the source and target projects have different sets of metrics (i.e. heterogeneous metrics). HDP first selects informative metrics from the source and target projects, then matches metrics between the projects that have similar distributions. It uses the matched metrics to build a prediction model on the source project and apply it to the target project. The technique is evaluated on multiple public defect datasets and is shown to outperform whole-project defect prediction and other cross-project defect prediction baselines in most cases, demonstrating the potential of HDP to reuse existing defect data more widely.
Common malware and countermeasures
Common malware and countermeasuresNoushin Ahson Security Awareness related to common malwares, (viruses, trojans, worms etc) the damages they cause and basic countermeasures one can adopt to protect against them.
Power of Splunk Search Processing Language (SPL) ...
Power of Splunk Search Processing Language (SPL) ...Splunk This session will unveil the power of the Splunk Search Processing Language (SPL). See how to use Splunk's simple search language for searching and filtering through data, charting statistics and predicting values, converging data sources and grouping transactions, and finally data science and exploration. We'll begin with basic search commands and build up to more powerful advanced tactics to help you harness your Splunk Fu!
MITRE ATT&CKcon 2.0: ATT&CK Updates - Cyber Analytics Repository (CAR); Ivan ...
MITRE ATT&CKcon 2.0: ATT&CK Updates - Cyber Analytics Repository (CAR); Ivan ...MITRE - ATT&CKcon The document summarizes the Cyber Analytics Repository (CAR), an openly available repository of ATT&CK-driven analytics maintained by MITRE. CAR contains analytics for detecting adversary tactics and techniques, mappings of analytics to sensors, and an exploration tool. Recent work has focused on increasing quality and usability by adding new analytics, converting analytics to a machine-readable format, and supporting multiple implementations. Future goals include expanding coverage of ATT&CK techniques, updating the data model and sensor coverage, and improving the analytic exploration tool. The document encourages contributions of new analytics to CAR.
EDR(End Point Detection And Response).pptx
EDR(End Point Detection And Response).pptxSMIT PAREKH This document describes an EDR (Endpoint Detection and Response) system implementation project for Invinsense. The system was developed using technologies like React JS, C language, Python REST API, Docker, Kubernetes, and deployed on both Windows and Linux agents. It provides features like agent monitoring, antivirus scanning, log collection and analysis. Screenshots show interfaces for login, agent details, scanning, dashboards, reports. Future enhancements proposed include SSO, AI/ML, Mac OS agent, Ansible deployment.
Physical Penetration Testing (RootedCON 2015)
Physical Penetration Testing (RootedCON 2015)Eduardo Arriols Nuñez This document discusses physical penetration testing as part of a red team assessment. It defines physical penetration testing as evaluating physical security controls and procedures at a target facility. The methodology involves planning and intelligence gathering, followed by breaching physical security measures to gain access. A case study example demonstrates bypassing access controls, alarms, and sensors to access different floors within a building. The document concludes that physical intrusions require creativity and lateral thinking, and that red team assessments provide a comprehensive way to evaluate security.
Bai 10
Bai 10Hồng Hải Đàm Quang Pháp chứng kỹ thuật số cung cấp cho sinh viên với một cách tiếp cận có hệ thống khi tiến hành một điều tra pháp chứng máy tính (cả hai loại điều tra công quyền và điều tra công ty), các yêu cầu của một phòng thí nghiệm pháp chứng máy tính bao gồm cả thiết bị phục hồi dữ liệu, phần cứng và phần mềm cần thiết để xác nhận pháp chứng kỹ thuật số trong phòng thí nghiệm.
NTFS Forensics 
NTFS Forensics nullowaspmumbai The document discusses NTFS forensics. It begins with introducing the speaker and their background in information security and computer forensics. It then provides an overview of NTFS, including that it is the default file system for Windows NT-based operating systems and some of its key features. The document discusses some of the internals of NTFS like the master file table ($MFT), timestamps, alternate data streams, extended attributes, and the $UsnJrnl journal file that can contain forensic artifacts. It notes how understanding these NTFS artifacts can aid in file recovery, finding hidden data, and malware analysis.
Android malware presentation
Android malware presentationSandeep Joshi This document summarizes information about Android malware, including its goals, installation methods, evasion techniques, and detection methods. Some key points:
- Malware goals include sending premium SMS, stealing banking info, adware click fraud, and ransomware. It can also mine bitcoin or exfiltrate personal data.
- It installs via repackaged apps, update attacks, drive-by downloads, or by misusing accessibility services. Packers encrypt the APK to evade detection.
- Evasion techniques include dynamic C&C domains, encryption, reflection, delaying attacks, and polymorphism/metamorphism. It also checks for emulators or debuggers.
- Detection analy
1. Security and Risk Management
1. Security and Risk ManagementSam Bowne This document provides an overview of Chapter 1 of the CNIT 125 course on information security and CISSP preparation. Part 1 discusses security terms like the CIA triad of confidentiality, integrity and availability. It also covers security governance principles such as data classification, roles and responsibilities, and strategic/tactical/operational planning. Part 2 introduces several security control frameworks and standards for compliance, as well as legal/regulatory issues involving computer crime, liability, and intellectual property.
Threat Hunting Techniques.pdf
Threat Hunting Techniques.pdfinfosecTrain In the realm of cybersecurity, threat hunting is a proactive approach to identifying and mitigating potential security threats before they manifest. Effective threat hunting involves continuous monitoring, analysis of network logs, and the use of advanced tools to detect anomalies. Security professionals employ techniques such as signature-based detection, anomaly detection, and behavior analysis to uncover hidden threats. Threat intelligence feeds and collaboration with industry peers also enhance the effectiveness of threat hunting. By staying ahead of cyber adversaries, organizations can bolster their defenses, minimize vulnerabilities, and safeguard sensitive information from potential breaches.
For more information - https://www.infosectrain.com/blog/threat-hunting-methodologies-tools-and-tips/
Endpoint Security
Endpoint SecurityAhmed Hashem El Fiky This document discusses endpoint security solutions, focusing on Trend Micro OfficeScan. It defines endpoint categories as endpoint antivirus and endpoint security. It provides features of each category and top vendors. It recommends Trend Micro OfficeScan for its comprehensive threat protection, centralized management, and proven track record. The document outlines OfficeScan's system requirements and provides step-by-step instructions for installing and configuring the OfficeScan server and agents.
3170725_Unit-1.pptx
3170725_Unit-1.pptxYashPatel132112 This document provides an overview of digital forensics. It defines digital forensics as the process of preserving, identifying, extracting, and documenting computer evidence for use in a court of law. The document outlines the typical digital forensic process of identification, preservation, analysis, documentation, and presentation. It also discusses the history of digital forensics and provides examples of different types including disk, network, wireless, database, malware, email, memory, and mobile phone forensics. Challenges and advantages of digital forensics are also summarized.
Computer Worms
Computer Wormssadique_ghitm This document discusses computer worms, including how they work, types of worms, and examples of major worms. It defines worms as programs that replicate themselves across a network by exploiting security vulnerabilities. The document covers worm target discovery, propagation, activation methods, payloads, examples like Morris worm, Code Red, Nimda, SQL Slammer, and Sobig.f, as well as prevention techniques and current research focus areas.
Addressing the cyber kill chain
Addressing the cyber kill chainSymantec Brasil Conceito militar, agora aplicado a Cibersegurança, o "the cyber kill chain" foi desenvolvido pela Lockheed Martin em 2011. Ele descreve as fases que um adversário seguirá para alvejar uma Organização. São 7 fases bem definidas e este ataque é considerado bem sucedido
se / quando todas as fases foram realizadas.
(DOCUMENTO EM INGLÊS)
Ntfs forensics
Ntfs forensicsn|u - The Open Security Community The document discusses NTFS forensics and the structure of the NTFS file system. Some key points:
1) NTFS stores metadata about files and folders in the Master File Table ($MFT) using file records and attributes like $FILE_NAME and $DATA.
2) Files can be recovered by finding their data runs stored in the $MFT entry and reading the data from disk.
3) Additional forensic artifacts can be found in hidden internal files like $USNJRNL, $LogFile, and $Bitmap that contain metadata about file operations and deletions.
Introduction to data structures and Algorithm
Introduction to data structures and AlgorithmDhaval Kaneria This document provides an introduction to data structures and algorithms. It discusses key concepts like algorithms, abstract data types (ADTs), data structures, time complexity, and space complexity. It describes common data structures like stacks, queues, linked lists, trees, and graphs. It also covers different ways to classify data structures, the process for selecting an appropriate data structure, and how abstract data types encapsulate both data and functions. The document aims to explain fundamental concepts related to organizing and manipulating data efficiently.
Windows firewall
Windows firewallVC Infotech This document defines and describes different types of firewalls. It begins by defining a firewall as a hardware or software network security system that controls incoming and outgoing network traffic using rules. It notes that the first firewall was invented by William Cheswick, Steven Bellovin, and others. The document then describes three main types of firewalls - packet filtering, application proxy, and hybrid - and provides details on their workings, advantages, and disadvantages. It concludes by stating that while firewalls help protect systems, they are not fully secure on their own.
MITRE ATT&CKcon 2018: Helping Your Non-Security Executives Understand ATT&CK ...
MITRE ATT&CKcon 2018: Helping Your Non-Security Executives Understand ATT&CK ...MITRE - ATT&CKcon ATT&CK is an incredibly valuable framework for describing and analyzing what’s happening in your environment. Sometimes security professionals not only need a way to understand, but also need a way to clearly articulate to non-security leadership to gain support and investment in needed resourcing. Using UX design methods, CrowdStrike came up with a mental model and more conversational terms to help anyone quickly parse the big picture.
Cyber kill chain
Cyber kill chainAnkita Ganguly The cyber kill chain describes cyber attacks from an attacker's perspective through distinct phases: (1) reconnaissance, (2) weaponization, (3) delivery, (4) exploitation, (5) installation, (6) command and control, and (7) actions on objectives. Each phase of the kill chain can be mapped to defensive tools and actions to prevent attacks. Understanding the kill chain stages gives analysts insight into what is being attempted and how to respond appropriately. The kill chain was developed by Lockheed Martin as a method to describe intrusions and prevent advanced persistent threats by highly trained adversaries targeting sensitive information.
Securing password
Securing passwordsplendorcollege Passwords are secret codes that allow users to access files, computers, and programs. They are important for security and preventing unauthorized access. However, passwords can be stolen internally if overheard, seen over someone's shoulder, or found written down. The document provides tips for creating strong passwords that are long, complex, varied between accounts, and changed often. It warns against weak passwords that are short, repetitive, or use personal details. Creating secure passwords is key to protecting personal and organizational resources.
Advanced Persistent Threat
Advanced Persistent ThreatAmmar WK The document discusses Advanced Persistent Threats (APTs). It begins by defining APTs and noting some common misconceptions about them. It then discusses notable APT attacks from 2003 to 2017. Finally, it outlines the typical lifecycle of an APT attack, including preparation such as researching targets, acquiring tools, and testing for detection, as well as the intrusion deployment phase.
SANS Windows Artifact Analysis 2012
SANS Windows Artifact Analysis 2012Rian Yulian This document summarizes several Windows registry keys and artifacts that can provide information about a user's digital activities. It describes keys that track recently opened files, installed applications, browser history and search terms, network connections, and more. Examining these locations can reveal details like the files and websites a user accessed, when they were accessed, and from where they originated.
What is Penetration & Penetration test ?
What is Penetration & Penetration test ?Bhavin Shah Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
Websockets and SockJS, Real time chatting
Websockets and SockJS, Real time chattingUniversity of Alabama at Birmingham SockJS is a browser JavaScript library that provides a WebSocket-like object. It gives a coherent, cross-browser, Javascript API which creates a low latency, full duplex, cross-domain communication channel between the browser and the web server.
Under the hood SockJS tries to use native WebSockets first.
SockJS is intended to work for all modern browsers and in environments which don't support the WebSocket protocol. In this slide a real time chat application using SockJS (sockjs-1.1.1.min.js as SockJS-client, SockJS-node as SockJS-server) step by step development is also shown.
Ad
More Related Content
What's hot (20)
Physical Penetration Testing (RootedCON 2015)
Physical Penetration Testing (RootedCON 2015)Eduardo Arriols Nuñez This document discusses physical penetration testing as part of a red team assessment. It defines physical penetration testing as evaluating physical security controls and procedures at a target facility. The methodology involves planning and intelligence gathering, followed by breaching physical security measures to gain access. A case study example demonstrates bypassing access controls, alarms, and sensors to access different floors within a building. The document concludes that physical intrusions require creativity and lateral thinking, and that red team assessments provide a comprehensive way to evaluate security.
Bai 10
Bai 10Hồng Hải Đàm Quang Pháp chứng kỹ thuật số cung cấp cho sinh viên với một cách tiếp cận có hệ thống khi tiến hành một điều tra pháp chứng máy tính (cả hai loại điều tra công quyền và điều tra công ty), các yêu cầu của một phòng thí nghiệm pháp chứng máy tính bao gồm cả thiết bị phục hồi dữ liệu, phần cứng và phần mềm cần thiết để xác nhận pháp chứng kỹ thuật số trong phòng thí nghiệm.
NTFS Forensics
NTFS Forensics nullowaspmumbai The document discusses NTFS forensics. It begins with introducing the speaker and their background in information security and computer forensics. It then provides an overview of NTFS, including that it is the default file system for Windows NT-based operating systems and some of its key features. The document discusses some of the internals of NTFS like the master file table ($MFT), timestamps, alternate data streams, extended attributes, and the $UsnJrnl journal file that can contain forensic artifacts. It notes how understanding these NTFS artifacts can aid in file recovery, finding hidden data, and malware analysis.
Android malware presentation
Android malware presentationSandeep Joshi This document summarizes information about Android malware, including its goals, installation methods, evasion techniques, and detection methods. Some key points:
- Malware goals include sending premium SMS, stealing banking info, adware click fraud, and ransomware. It can also mine bitcoin or exfiltrate personal data.
- It installs via repackaged apps, update attacks, drive-by downloads, or by misusing accessibility services. Packers encrypt the APK to evade detection.
- Evasion techniques include dynamic C&C domains, encryption, reflection, delaying attacks, and polymorphism/metamorphism. It also checks for emulators or debuggers.
- Detection analy
1. Security and Risk Management
1. Security and Risk ManagementSam Bowne This document provides an overview of Chapter 1 of the CNIT 125 course on information security and CISSP preparation. Part 1 discusses security terms like the CIA triad of confidentiality, integrity and availability. It also covers security governance principles such as data classification, roles and responsibilities, and strategic/tactical/operational planning. Part 2 introduces several security control frameworks and standards for compliance, as well as legal/regulatory issues involving computer crime, liability, and intellectual property.
Threat Hunting Techniques.pdf
Threat Hunting Techniques.pdfinfosecTrain In the realm of cybersecurity, threat hunting is a proactive approach to identifying and mitigating potential security threats before they manifest. Effective threat hunting involves continuous monitoring, analysis of network logs, and the use of advanced tools to detect anomalies. Security professionals employ techniques such as signature-based detection, anomaly detection, and behavior analysis to uncover hidden threats. Threat intelligence feeds and collaboration with industry peers also enhance the effectiveness of threat hunting. By staying ahead of cyber adversaries, organizations can bolster their defenses, minimize vulnerabilities, and safeguard sensitive information from potential breaches.
For more information - https://www.infosectrain.com/blog/threat-hunting-methodologies-tools-and-tips/
Endpoint Security
Endpoint SecurityAhmed Hashem El Fiky This document discusses endpoint security solutions, focusing on Trend Micro OfficeScan. It defines endpoint categories as endpoint antivirus and endpoint security. It provides features of each category and top vendors. It recommends Trend Micro OfficeScan for its comprehensive threat protection, centralized management, and proven track record. The document outlines OfficeScan's system requirements and provides step-by-step instructions for installing and configuring the OfficeScan server and agents.
3170725_Unit-1.pptx
3170725_Unit-1.pptxYashPatel132112 This document provides an overview of digital forensics. It defines digital forensics as the process of preserving, identifying, extracting, and documenting computer evidence for use in a court of law. The document outlines the typical digital forensic process of identification, preservation, analysis, documentation, and presentation. It also discusses the history of digital forensics and provides examples of different types including disk, network, wireless, database, malware, email, memory, and mobile phone forensics. Challenges and advantages of digital forensics are also summarized.
Computer Worms
Computer Wormssadique_ghitm This document discusses computer worms, including how they work, types of worms, and examples of major worms. It defines worms as programs that replicate themselves across a network by exploiting security vulnerabilities. The document covers worm target discovery, propagation, activation methods, payloads, examples like Morris worm, Code Red, Nimda, SQL Slammer, and Sobig.f, as well as prevention techniques and current research focus areas.
Addressing the cyber kill chain
Addressing the cyber kill chainSymantec Brasil Conceito militar, agora aplicado a Cibersegurança, o "the cyber kill chain" foi desenvolvido pela Lockheed Martin em 2011. Ele descreve as fases que um adversário seguirá para alvejar uma Organização. São 7 fases bem definidas e este ataque é considerado bem sucedido
se / quando todas as fases foram realizadas.
(DOCUMENTO EM INGLÊS)
Ntfs forensics
Ntfs forensicsn|u - The Open Security Community The document discusses NTFS forensics and the structure of the NTFS file system. Some key points:
1) NTFS stores metadata about files and folders in the Master File Table ($MFT) using file records and attributes like $FILE_NAME and $DATA.
2) Files can be recovered by finding their data runs stored in the $MFT entry and reading the data from disk.
3) Additional forensic artifacts can be found in hidden internal files like $USNJRNL, $LogFile, and $Bitmap that contain metadata about file operations and deletions.
Introduction to data structures and Algorithm
Introduction to data structures and AlgorithmDhaval Kaneria This document provides an introduction to data structures and algorithms. It discusses key concepts like algorithms, abstract data types (ADTs), data structures, time complexity, and space complexity. It describes common data structures like stacks, queues, linked lists, trees, and graphs. It also covers different ways to classify data structures, the process for selecting an appropriate data structure, and how abstract data types encapsulate both data and functions. The document aims to explain fundamental concepts related to organizing and manipulating data efficiently.
Windows firewall
Windows firewallVC Infotech This document defines and describes different types of firewalls. It begins by defining a firewall as a hardware or software network security system that controls incoming and outgoing network traffic using rules. It notes that the first firewall was invented by William Cheswick, Steven Bellovin, and others. The document then describes three main types of firewalls - packet filtering, application proxy, and hybrid - and provides details on their workings, advantages, and disadvantages. It concludes by stating that while firewalls help protect systems, they are not fully secure on their own.
MITRE ATT&CKcon 2018: Helping Your Non-Security Executives Understand ATT&CK ...
MITRE ATT&CKcon 2018: Helping Your Non-Security Executives Understand ATT&CK ...MITRE - ATT&CKcon ATT&CK is an incredibly valuable framework for describing and analyzing what’s happening in your environment. Sometimes security professionals not only need a way to understand, but also need a way to clearly articulate to non-security leadership to gain support and investment in needed resourcing. Using UX design methods, CrowdStrike came up with a mental model and more conversational terms to help anyone quickly parse the big picture.
Cyber kill chain
Cyber kill chainAnkita Ganguly The cyber kill chain describes cyber attacks from an attacker's perspective through distinct phases: (1) reconnaissance, (2) weaponization, (3) delivery, (4) exploitation, (5) installation, (6) command and control, and (7) actions on objectives. Each phase of the kill chain can be mapped to defensive tools and actions to prevent attacks. Understanding the kill chain stages gives analysts insight into what is being attempted and how to respond appropriately. The kill chain was developed by Lockheed Martin as a method to describe intrusions and prevent advanced persistent threats by highly trained adversaries targeting sensitive information.
Securing password
Securing passwordsplendorcollege Passwords are secret codes that allow users to access files, computers, and programs. They are important for security and preventing unauthorized access. However, passwords can be stolen internally if overheard, seen over someone's shoulder, or found written down. The document provides tips for creating strong passwords that are long, complex, varied between accounts, and changed often. It warns against weak passwords that are short, repetitive, or use personal details. Creating secure passwords is key to protecting personal and organizational resources.
Advanced Persistent Threat
Advanced Persistent ThreatAmmar WK The document discusses Advanced Persistent Threats (APTs). It begins by defining APTs and noting some common misconceptions about them. It then discusses notable APT attacks from 2003 to 2017. Finally, it outlines the typical lifecycle of an APT attack, including preparation such as researching targets, acquiring tools, and testing for detection, as well as the intrusion deployment phase.
SANS Windows Artifact Analysis 2012
SANS Windows Artifact Analysis 2012Rian Yulian This document summarizes several Windows registry keys and artifacts that can provide information about a user's digital activities. It describes keys that track recently opened files, installed applications, browser history and search terms, network connections, and more. Examining these locations can reveal details like the files and websites a user accessed, when they were accessed, and from where they originated.
What is Penetration & Penetration test ?
What is Penetration & Penetration test ?Bhavin Shah Penetration testing (also called pen testing) is the practice of testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.
Viewers also liked (20)
Websockets and SockJS, Real time chatting
Websockets and SockJS, Real time chattingUniversity of Alabama at Birmingham SockJS is a browser JavaScript library that provides a WebSocket-like object. It gives a coherent, cross-browser, Javascript API which creates a low latency, full duplex, cross-domain communication channel between the browser and the web server.
Under the hood SockJS tries to use native WebSockets first.
SockJS is intended to work for all modern browsers and in environments which don't support the WebSocket protocol. In this slide a real time chat application using SockJS (sockjs-1.1.1.min.js as SockJS-client, SockJS-node as SockJS-server) step by step development is also shown.
WebSockets with Spring 4
WebSockets with Spring 4Sergi Almar i Graupera This document discusses WebSockets and Spring WebSockets. It begins by introducing WebSockets as a protocol for real-time full duplex communication over a single TCP connection. It then covers the WebSocket handshake process and JavaScript WebSocket API. Next, it discusses Java WebSocket implementations and how Spring 4 supports WebSockets and the fallback SockJS protocol. Finally, it introduces STOMP as a simple messaging protocol that can be used over WebSockets, and how Spring supports asynchronous messaging using STOMP over WebSockets.
Spring + WebSocket integration
Spring + WebSocket integrationOleksandr Semenov Spring can integrate with WebSockets to enable asynchronous data exchange between a client and server. This overcomes limitations of synchronous HTTP. WebSockets provide a persistent connection and low overhead compared to alternatives like polling. Spring supports WebSocket through STOMP, a messaging subprotocol. It allows configuration of WebSocket endpoints in Spring MVC. However, the internal Spring architecture is not optimal if an external message broker is involved rather than using Spring's embedded broker.
Spring Boot & WebSocket
Spring Boot & WebSocketMing-Ying Wu Spring Boot & WebSocket presentation covers:
1. An introduction to Spring Boot and its advantages over traditional Spring configurations. Spring Boot aims to provide a faster development experience with less configuration.
2. Examples of integrating common features into Spring Boot applications like Tomcat, JSP, MySQL, security, and logging. Spring Boot plugins simplify adding these features.
3. A demonstration of using WebSocket, SockJS, and STOMP with Spring Boot for real-time client-server communication. Server-side configurations and client-side JavaScript/Java code are shown.
4. Sequence diagrams illustrate use cases for WebSocket with SockJS and STOMP to send messages to subscribers from the server and between clients.
Sometimes web sockets_dont_work
Sometimes web sockets_dont_workXMPPUK The document discusses strategies for improving connectivity when using WebSockets. It proposes defining different transport options and strategies in JSON format. The suggested strategy first checks if WebSockets are supported, then tries connecting via WebSockets and falls back to SockJS if needed, caching results for future attempts. Metrics on transport states and browser features would be collected to evaluate strategy performance.
Blending django, Sockjs, Twisted, Celery, FTP and some magic sauce into a bla...
Blending django, Sockjs, Twisted, Celery, FTP and some magic sauce into a bla...frog32 This document discusses the architecture for building an interactive radio station website that streams playlists and tracks in real-time to users. It will use Django for the backend, Twisted for the websocket server, SockJS for browser compatibility, and Celery to process tasks asynchronously like fetching album art. The radio station API exports playlists as XML files that will be uploaded to an FTP server and parsed by Django to populate the websocket stream.
Максим Сабарня и Иван Дрижирук “Vert.x – tool-kit for building reactive app...
Максим Сабарня и Иван Дрижирук “Vert.x – tool-kit for building reactive app...Anna Shymchenko This document discusses Vert.x, an open source tool-kit for building reactive applications on the JVM. It addresses common problems with enterprise solutions like multithreading, scalability and performance. Vert.x uses an event-driven architecture with non-blocking code and an event bus for communication. It allows building distributed systems as microservices with modules that can be deployed on servers or clients. While powerful, it also presents challenges around debugging, callbacks and sharing objects between verticles.
Big Data - Linked In_DEEPU
Big Data - Linked In_DEEPUDeepu M The document discusses big data technologies including Apache HBase, Hive, Hadoop, MapReduce, Spring XD, Sqoop, Spark, Kafka, Solr, Zookeeper, and Oozie. It also outlines several proof of concept projects involving importing structured and unstructured data using these technologies, real-time ingestion of data from databases into HDFS, Hive and HBase integration, indexing and searching large datasets with Solr, monitoring and charting big data growth, data compression and encryption, job scheduling with Oozie, and implementing machine learning algorithms with Spark MLib.
Vert.x
Vert.xXavier MARIN Vert.X the Simple threadSafe concurrent asynchronous eventDriven reactive eventBus over a scalable polyglot embeddable toolkit plateform
Realtime web application with java
Realtime web application with javaJeongHun Byeon The document discusses various techniques for implementing real-time web applications, including polling, Comet, and WebSockets. It explains that polling involves the browser periodically requesting updates from the server. Comet enables long-polling to allow the server to push responses to the browser without requiring it to send frequent requests. WebSockets provide true two-way communication by upgrading the initial HTTP connection to a WebSocket protocol.
Vert.x using Groovy - Simplifying non-blocking code
Vert.x using Groovy - Simplifying non-blocking codesascha_klein The possibilities and advantages of non-blocking IO are great.
But as you have to hassle with callbacks all over the place you have to think differently.
Sometimes simple constructs we are used to are getting ugly or really hard to realize.
A little bit of Groovy-magic can help out to simplify life and make your code more look like you are used to.
This session wants to show experiences creating a vert.x-based application and the solutions we used to smooth up our code.
Vert.x 3
Vert.x 3Xavier MARIN FinistJug presentation of Vert.X 3
http://finistjug.fr/2015/08/23/soiree-de-rentree-du-finistjug-mardi-15-septembre/
WebSockets and Java
WebSockets and JavaBozhidar Bozhanov This document discusses WebSockets and their advantages over traditional AJAX polling for real-time applications like games and stock tickers. WebSockets allow for full-duplex communication over a single TCP connection, making them more efficient than polling approaches. They have become a standard in HTML5 and support on browsers is improving, though fallbacks like SockJS are still needed. Popular server-side implementations include Node.js and the Java WebSocket API integrated with frameworks like Spring. WebSockets also integrate well with messaging architectures using brokers like RabbitMQ. Security considerations include using WSS instead of WS and validating input/output.
Vert.x
Vert.xMatt Stine Vert.x is an asynchronous event-driven framework that addresses some of the shortcomings of Node.js. It uses a polyglot approach that allows programming in multiple languages instead of just JavaScript. It leverages the multi-threaded JVM to allow both vertical and horizontal scaling. An event bus provides a distributed communication system across processes and into the browser. Worker verticles allow blocking operations to run off the main event loop threads. Shared immutable data structures enable safe sharing of state across instances.
Vert.x devoxx london 2013
Vert.x devoxx london 2013Stuart (Pid) Williams Vert.x is a general purpose application platform for building asynchronous and reactive applications. It uses an event-driven architecture with non-blocking APIs to build distributed applications that can be composed of components written in different programming languages. Vert.x provides tools like an event bus for communication between components, as well as HTTP/TCP clients and servers that allow building reactive web and microservices applications. It aims to simplify concurrency while leveraging existing Java libraries and allowing applications to scale across multiple machines.
Xitrum @ Scala Matsuri Tokyo 2014
Xitrum @ Scala Matsuri Tokyo 2014Ngoc Dao This document provides an overview of Xitrum, an asynchronous and clustered Scala web framework built on top of Netty and Akka. It describes what Xitrum is, why it should be used, how it works, examples of its features like actions, views, routing, authentication, and more. It also provides links to the Xitrum homepage, guides, community, and examples of where Xitrum is used in production.
Xitrum HOWTOs
Xitrum HOWTOsNgoc Dao This document provides an overview of how to use the Xitrum web framework, including how to create a new project, routes, run and debug the application, internationalization, scaling, and monitoring. It also compares Xitrum to the Play framework and lists some key differences.
How to write a web framework
How to write a web frameworkNgoc Dao This document discusses writing web frameworks. It begins by introducing the speaker, Ngoc, and his experience writing several web frameworks in different languages. It then asks questions to prompt discussion about web frameworks, including differences between frameworks and libraries, challenges in writing frameworks, and important framework features. The document emphasizes that frameworks should have a clear vision and workflow. It also provides examples from Sinetja and Xitrum frameworks to illustrate concepts.
Ad
Similar to SockJS Intro (20)
Nodejs and WebSockets
Nodejs and WebSocketsGonzalo Ayuso Node.js is an asynchronous event-driven JavaScript runtime that allows JavaScript to be used on the server-side. It uses a non-blocking I/O model that makes it suitable for real-time web applications. WebSockets provide a standardized way for the browser and server to establish two-way communication. However, not all browsers support WebSockets yet. Socket.io addresses this by providing a WebSocket-like experience across all browsers through fallbacks like long-polling. It allows real-time applications to be developed more easily.
Introduction to Vert.x
Introduction to Vert.xYiguang Hu Vert.x is a tool for building reactive applications on the JVM. It is polyglot, allowing applications to be written in Java, Groovy, JavaScript and other languages. It uses an asynchronous and non-blocking model with shared-nothing communication between components. Modules communicate through publish/subscribe messaging on an event bus or directly through request-response patterns. Vert.x provides horizontal scaling and allows efficient use of server resources. It can also integrate with SockJS to provide WebSocket-like capabilities in browsers that do not support WebSockets.
soft-shake.ch - Hands on Node.js
soft-shake.ch - Hands on Node.jssoft-shake.ch Mathilde Lemée & Romain Maton
La théorie, c’est bien, la pratique … aussi !
Venez nous rejoindre pour découvrir les profondeurs de Node.js !
Nous nous servirons d’un exemple pratique pour vous permettre d’avoir une premiere experience complete autour de Node.js et de vous permettre de vous forger un avis sur ce serveur Javascript qui fait parler de lui !
http://soft-shake.ch/2011/conference/sessions/incubator/2011/09/01/hands-on-nodejs.html
Introduction to Node.js
Introduction to Node.jsSomkiat Puisungnoen This document provides an overview of Node.js, including its goals, features, and uses. Node.js is a server-side JavaScript platform designed for building scalable network applications. It uses a non-blocking I/O model and single-threaded event loop. Node.js is commonly used for real-time web applications due to its non-blocking architecture. The document also discusses Node.js modules, installation, basic HTTP servers, and blocking vs non-blocking code.
Event-driven IO server-side JavaScript environment based on V8 Engine
Event-driven IO server-side JavaScript environment based on V8 EngineRicardo Silva This document contains information about Ricardo Silva's background and areas of expertise. It includes his degree in Computer Science from ISTEC and MSc in Computation and Medical Instrumentation from ISEP. It also notes that he works as a Software Developer at Shortcut, Lda and maintains a blog and email contact for Node.js topics. The document then covers several JavaScript, Node.js and Websockets topics through examples and explanations in 3 sentences or less each.
GWT Web Socket and data serialization
GWT Web Socket and data serializationGWTcon This document discusses using WebSockets for bidirectional communication between a GWT client and server. It provides an overview of setting up WebSocket connections on both the client and server sides in GWT, including writing a JSNI wrapper to initialize the WebSocket on the client. It also discusses using GWT's existing RPC serialization mechanism to serialize and deserialize Java objects sent over the WebSocket connection, avoiding the need for additional serialization libraries. Code examples are provided for initializing the WebSocket and handling messages on both the client and server sides, as well as using GWT's serialization streams to serialize and deserialize objects between the client and server.
An opinionated intro to Node.js - devrupt hospitality hackathon
An opinionated intro to Node.js - devrupt hospitality hackathonLuciano Mammino A talk presenting an opinionated introduction to Node.js, proving a simple introduction to the async model, some common async patterns and some other interesting Node.js tricks.
5.node js
5.node jsGeunhyung Kim node.js, Asynchronous I/O, Synchronous I/O, Simple HTTP Server, HTTP request handler, request router
Socket.IO
Socket.IOArnout Kazemier This document summarizes the new features and changes in version 0.7 of the Socket.IO library. Key updates include a complete API rewrite, support for multiple processes, a new messaging protocol with flags for different message types, acknowledgments between client and server, namespacing to allow multiplexing, handshake support for sessions, shared code modules between client and server, and testing on both the client and server. The release of version 0.7 is planned for this week.
HTML5: huh, what is it good for?
HTML5: huh, what is it good for?Remy Sharp HTML5 provides new semantic elements like <article> and <header> that allow for more meaningful structure than generic divs and spans. It also enables new multimedia capabilities with <video>, <audio>, and the <canvas> element for drawing. Behind the scenes, HTML5 introduces APIs for offline web applications, local storage, and client-side databases. The document discusses these new features and how to use polyfills to provide fallback support for older browsers that don't yet support the full HTML5 specification.
KSDG-iSlide App 開發心得分享
KSDG-iSlide App 開發心得分享Chia Wei Tsai This document summarizes a hackathon event where a team worked on developing an iSlide presentation platform. They explored using websockets to enable real-time sharing and editing of slides. They also discussed dynamically generating QR codes and accessing the local network IP address from within Android applications to access the iSlide server.
Going realtime with Socket.IO
Going realtime with Socket.IOChristian Joudrey The document discusses using Socket.IO to create real-time web applications. It outlines the challenges of maintaining persistent connections between clients and servers across browsers. Socket.IO provides a wrapper that supports different transport mechanisms like websockets, flash sockets, and long polling. The document provides code examples for setting up a basic Socket.IO server, handling client connections, broadcasting and receiving messages, and detecting disconnections.
Writing robust Node.js applications
Writing robust Node.js applicationsTom Croucher This document provides an introduction and overview of a Node.js tutorial presented by Tom Hughes-Croucher. The tutorial covers topics such as building scalable server-side code with JavaScript using Node.js, debugging Node.js applications, using frameworks like Express.js, and best practices for deploying Node.js applications in production environments. The tutorial includes exercises for hands-on learning and demonstrates tools and techniques like Socket.io, clustering, error handling and using Redis with Node.js applications.
Server Side Swift: Vapor
Server Side Swift: VaporPaweł Kowalczuk This is my presentation from TechBeats #3 hosted by Applause about Server-Side Swift framework called Vapor.
Swift is a great language and possibility of using it also in backend is a huge benefit for any iOS developer out there. Using Vapor is a seamless experience. With this framework creating advance APIs by iOS developer is as easy as writing simple iOS app.
https://www.meetup.com/TechBeats-hosted-by-Applause/events/254910023/
Serverless Java on Kubernetes
Serverless Java on KubernetesKrzysztof Sobkowiak Krzysztof Sobkowiak presented on serverless Java on Kubernetes. Serverless computing refers to building applications without server management by deploying functions that automatically scale in response to demand. Function as a Service (FaaS) platforms like Apache OpenWhisk allow running Java code as stateless functions on Kubernetes. OpenWhisk supports Java actions and integrates with services through triggers and rules to enable event-driven architectures. Spring Cloud Functions provides a framework for building serverless applications using Spring Boot and Java.
Websockets talk at Rubyconf Uruguay 2010
Websockets talk at Rubyconf Uruguay 2010Ismael Celis This document discusses using WebSockets for real-time applications in Ruby. It begins with an overview of WebSockets and use cases. It then covers the WebSocket DOM API, handshake process, and implementing a WebSocket server in Ruby with EventMachine and EM-WebSocket. It provides an example of building a multicast channel application with JSON messages. It also discusses scaling options like Pusher and shows code samples for a Pusher implementation.
What's new in Java EE 7? From HTML5 to JMS 2.0
What's new in Java EE 7? From HTML5 to JMS 2.0Bruno Borges Discover the new capabilities that Java EE 7 has to offer for you to build HTML5 applications. See some of the changes JMS brought to increase your Productivity!
These slides were presented at JBoss Users and Developers Conference, JUDCon Brazil 2013, on April 19th.
Plack perl superglue for web frameworks and servers
Plack perl superglue for web frameworks and serversTatsuhiko Miyagawa Plack provides a common interface called PSGI (Perl Server Gateway Interface) that allows Perl web applications to run on different web servers. It includes tools like Plackup for running PSGI applications from the command line and middleware for adding functionality. Plack has adapters that allow many existing Perl web frameworks to run under PSGI. It also provides high performance PSGI servers and utilities for building and testing PSGI applications.
NodeJS
NodeJSAlok Guha The document provides an overview of Node.js, a JavaScript runtime environment for building scalable network applications. Some key points covered include:
- Node.js is built on Google's V8 JavaScript engine and is event-driven and non-blocking.
- It is well-suited for data-intensive real-time applications due to its lightweight and efficient nature.
- Node.js differs from other scripting languages by being non-blocking, single-threaded, and having an event-based approach built-in.
Node.js - A practical introduction (v2)
Node.js - A practical introduction (v2)Felix Geisendörfer This document provides an introduction to Node.js including its history, uses, advantages, and community. It describes how Node.js uses non-blocking I/O and JavaScript to enable highly scalable applications. Examples show how Node.js can run HTTP servers and handle streaming data faster than traditional blocking architectures. The document recommends Node.js for real-time web applications and advises against using it for hard real-time systems or CPU-intensive tasks. It encourages participation in the growing Node.js community on mailing lists and IRC.
Ad
More from Ngoc Dao (20)
Model with actors and implement with Akka
Model with actors and implement with AkkaNgoc Dao This document provides an overview of actor modeling and how to implement actors using the Akka library. It begins with explaining the actor model and benefits of actors over threads. It then discusses how to create actors with Akka, demonstrating with a multiplayer chess game. The schedule outlines explaining the actor model for 1/4 of the time and how to create Akka actors for 3/4 of the time using the chess game demo. Useful links are provided for Akka documentation and chess/game related projects.
I18nize Scala programs à la gettext
I18nize Scala programs à la gettextNgoc Dao This document discusses internationalizing (i18n) Scala programs using the gettext approach. It describes marking strings for translation, extracting them to template files, loading translation files, and translating at runtime. Tools are introduced for extracting strings from Scala code and templates, editing translation files, and parsing loaded files. The approach works for various Scala template engines and frameworks like Play.
Develop realtime web with Scala and Xitrum
Develop realtime web with Scala and XitrumNgoc Dao This document discusses a talk given by Ngoc Dao on developing realtime and distributed web applications with Scala and Xitrum. The talk covers:
1) An overview of Scala, including its functional features, object-oriented features, tools like SBT and REPL, and how to get started.
2) Using Scala for web development with the Xitrum framework, including routing, responding to requests, internationalization, and metrics.
3) Using Scala for concurrency with futures, actors, and Akka FSM.
4) Building realtime web applications with websockets, Socket.IO and SockJS.
5) Distributed systems with Akka remoting
Actor-based concurrency and Akka Fundamentals
Actor-based concurrency and Akka FundamentalsNgoc Dao This document discusses actor-based concurrency and the Akka framework. It explains that actors are lightweight processes that communicate asynchronously by message passing rather than by sharing memory. This allows for high levels of concurrency. The document provides an example demonstrating how to define actor messages and behaviors in Akka to implement a simple counter actor. It also discusses some antipatterns to avoid, such as directly modifying actor state from outside the actor.
Xitrum @ Scala Conference in Japan 2013
Xitrum @ Scala Conference in Japan 2013Ngoc Dao Xitrum is a Scala web framework inspired by Rails that provides asynchronous and clustered capabilities. It uses Netty for asynchronous IO, Hazelcast for clustered data, and Akka for remote code. The framework was created because existing Scala options like Scalatra and Lift were not fully featured or easy to use from a Ruby perspective. Xitrum aims to provide more features than Scalatra and easier use than Lift. It has been used in many of the creator's projects involving chat systems, APIs, and real-time websites.
Easy distributed load test with Tsung
Easy distributed load test with TsungNgoc Dao Tsung is an open source tool for load testing applications. It can perform load testing from a single machine or in a distributed manner across multiple machines. The document discusses how to install Tsung and Erlang, configure a basic load test using a test.xml file, run the test, and view reports. It also covers how to set up distributed load testing using multiple client nodes and load balancing across Erlang VMs. Load testing WebSocket applications with Tsung is also briefly mentioned.
How to start using Scala
How to start using ScalaNgoc Dao This document provides an introduction to using Scala, including how to install Scala, use the Scala interactive console and compile Scala scripts and programs. It also discusses SBT (Scala Build Tool) for managing Scala projects and dependencies, and introduces some useful Scala frameworks like Xitrum for building web applications and Akka for building concurrent and distributed applications.
Cloud Erlang
Cloud ErlangNgoc Dao You normally think of virtualization as virtualization at the operating system level. But with Erlang, you can do virtualization at application level.
Xitrum internals
Xitrum internalsNgoc Dao Xitrum uses the Netty framework and follows a handler-based architecture. It aggregates HTTP requests and responses into a HandlerEnv object that passes through various handlers. These handlers include converting requests to HandlerEnv, selecting and calling actions, converting responses back to HTTP, and more. Routing is done by collecting routes specified by annotations at startup and dispatching requests to the appropriate action class execute method.
Camellia General
Camellia GeneralNgoc Dao This document provides a general overview of the Camellia project from November 2003. It discusses smart cameras and their applications, as well as the motivations and goals of the Camellia project, which aims to develop algorithms and an architecture for a co-processor to enable smart camera functionality. The document outlines the project's applications, co-processor requirements, prototyping efforts, and conclusions.
Sinh hoat CLB tin hoc Komaba lan 2 - Phat bieu cua Ngoc
Sinh hoat CLB tin hoc Komaba lan 2 - Phat bieu cua NgocNgoc Dao Sinh hoat CLB tin hoc Komaba lan 2 - Phat bieu cua Ngoc
Sinh hoat CLB tin hoc Komaba lan 1 - Phat bieu cua G
Sinh hoat CLB tin hoc Komaba lan 1 - Phat bieu cua GNgoc Dao Sinh hoat CLB tin hoc Komaba lan 1 - Phat bieu cua Giang
Sinh hoat CLB tin hoc Komaba lan 1 - Phat bieu cua Ngoc
Sinh hoat CLB tin hoc Komaba lan 1 - Phat bieu cua NgocNgoc Dao Sinh hoat CLB tin hoc Komaba lan 1 - Phat bieu cua Ngoc
SockJS Intro
- 1. SockJS Intro Ngoc Dao
- 2. Do you know WebSocket?
- 3. WebSocket <script> var sock = new WebSocket('ws://domain/my_prefix'); sock.onopen = function() { console.log('open'); }; sock.onmessage = function(e) { console.log('message', e.data); }; sock.onclose = function() { console.log('close'); Server can push data }; to browsers when it wants </script>
- 4. WebSocket New browsers are required: ● Internet Explorer: 10 ● Firefox: 6 ● Chrome: 4 ● Safari: 5 ● Opera: 12.10
- 5. SockJS ● Provides WebSocket-like API ● Supports all browsers, e.g. IE 6 ● Transports: websocket xhr-streaming xdr- streaming iframe-eventsource iframe-htmlfile xhr-polling xdr-polling iframe-xhr-polling jsonp- polling ● Requires Client side: sockjs.js Server side: SockJS server side library
- 6. WebSocket vs SockJS WebSocket SockJS <script> <script> var sock = new WebSocket('ws://domain/my_ws'); var sock = new SockJS('http://domain/my_prefix'); sock.onopen = function() { sock.onopen = function() { console.log('open'); console.log('open'); }; }; sock.onmessage = function(e) { sock.onmessage = function(e) { console.log('message', e.data); console.log('message', e.data); }; }; sock.onclose = function() { sock.onclose = function() { console.log('close'); console.log('close'); }; }; </script> </script>
- 7. Links ● Client side: <script src="http://cdn.sockjs.org/sockjs-0.3.min.js"></script> https://github.com/sockjs/sockjs-client ● Server side: Node.js: https://github.com/sockjs/sockjs-node Ruby: https://github.com/sockjs/sockjs-ruby Python: https://github.com/MrJoes/sockjs-tornado JVM: https://github.com/vert-x/vert.x https://github.com/ngocdaothanh/xitrum etc.
- 8. Links ● Client side: <script src="http://cdn.sockjs.org/sockjs-0.3.min.js"></script> https://github.com/sockjs/sockjs-client ● Server side: Node.js: https://github.com/sockjs/sockjs-node Ruby: https://github.com/sockjs/sockjs-ruby Python: https://github.com/MrJoes/sockjs-tornado JVM: https://github.com/vert-x/vert.x https://github.com/ngocdaothanh/xitrum etc.
- 9. Demo https://github.com/sockjs/sockjs-node/tree/master/examples/echo git clone git://github.com/sockjs/sockjs-node.git cd sockjs-node/examples/echo npm install node server.js
- 10. SockJS protocol If you want to implement a server side for SockJS, or just want to know how SockJS works: https://github.com/sockjs/sockjs-protocol http://sockjs.github.com/sockjs-protocol/sockjs-protocol-0.3.3.html
- 11. SockJS vs Socket.IO ● Socket.IO ≈ SockJS + α ● SockJS is way simpler, closer to WebSocket => SockJS has lots of server side implementations for many languages