Node.js Security
Although not a research paper, this thesis on “Analysis of Node.js platform web application security” is probably worth a read, given the insecure world we live in. Further reading, although a few months old, see Sven’s Application Security Forum Node.js security presentation.
Tales from a Trading Desk 