WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Aug 11, 2023

Using WebAssembly to run, extend, and secure your application

Niels Tanis

WebAssembly has outgrown the browser. It is now a powerhouse for backend security. Learn how WASI sandboxing neutralizes supply chain threats in your cloud-native apps.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to WebAssembly as a compilation target

WebAssembly acts as a high-performance compilation target capable of natively executing logic across diverse application environments.

#2 about 2 min

Early implementations of WebAssembly across major industries

Engineering teams rapidly adapted WebAssembly to migrate monolithic application code into the browser and target multiple platforms simultaneously.

#3 about 2 min

Core design principles of the WebAssembly standard

WebAssembly prioritizes fast binary instructions, readable code structures, default sandboxing, and strict backward compatibility to ensure web stability.

#4 about 1 min

Memory isolation and module ownership in WebAssembly

WebAssembly restricts memory access entirely by confining module operations to a specific contiguous mutable array without cross-module visibility.

#5 about 1 min

Enforcing code flow integrity within WebAssembly executions

The core compilation phase embeds execution maps that instantly panic and halt code flow upon detecting logical deviations.

#6 about 2 min

Running framework execution engines inside the browser

Standard framework engines compiled into WebAssembly transform default virtual machines into functional browser executables using JavaScript bridges.

#7 about 3 min

Extending capabilities with the WebAssembly System Interface

The Bytecode Alliance created WASI to safely expose external system interactions and host capabilities inside strict non-web boundaries.

#8 about 1 min

The coexistence of Docker and WebAssembly modules

Lightweight module deployments integrate alongside traditional Docker frameworks to increase system flexibility and reduce runtime footprint overhead.

#9 about 4 min

Enforcing local file permissions with capability-based security

Enforcing strict capability-based authorization parameters entirely prevents isolated modules from interacting with native system files without explicit flags.

#10 about 4 min

Extending managed applications with external Rust components

Cross-language setups require strict directory mapping constraints to maintain strong capability-based protections when calling external module dependencies.

#11 about 4 min

Preventing dependency vulnerabilities with the component model

Isolating transitive operations inside nanoprocesses effectively blocks vulnerable external packages from automatically inheriting system access rights.

#12 about 4 min

Testing the security posture of WebAssembly runtimes

Rigorous security audits and systematic fuzzing verify that underlying runtime engines gracefully resist unauthorized execution attempts.

Matching moments

1:32 min

Core principles and security model of WebAssembly

Stefan Schöberl · World Congress 2023

4:54 min

The origins and design principles of WebAssembly

Maurice Brinkmann · World Congress 2023

3:36 min

Core concepts of WebAssembly portability and sandboxed execution

Gaurav Gahlot Gaurav Gahlot · World Congress 2026 Europe

2:40 min

Core concepts and execution mechanics of WebAssembly modules

Edo Edo · World Congress 2024

5:06 min

Origins and design goals of WebAssembly

Matt Butcher · World Congress 2023

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · World Congress 2024

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
over 2 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 12:30–14:30

Stage 11

Docker sandboxes: protect your secrets, tokens, and personal data from AI agent mistakes

Kristiyan Velkov

Front-End Advocate | Speaker | AI & DevOps | Docker Captain | Cursor Ambassador | DevReal | Tech Blogger | Book Author

Kristiyan Velkov
Open session

World Congress 2026 North America

September 24, 2026 · 11:40–12:10

Stage 2

Stop Running Mystery Meat in Production

Jeroen van Erp

Technical Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate, Docker

Ajeet Raina
Open session

World Congress 2026 North America

September 24, 2026 · 10:20–10:50

Stage 1

The Browser Is Becoming an AI Runtime

Ajit Varma, Will Bryk

Ajit Varma
Will Bryk
Open session

World Congress 2026 North America

September 23, 2026 · 10:45–12:45

Stage 8

SBX 101: Hands-on with Docker Sandboxes

Dan Ndombe

Developer Success, Docker

Dan Ndombe
Open session

World Congress 2026 North America

September 25, 2026 · 11:00–11:30

Stage 6

Secure-by-Inclusion: Preventing Accessibility Barriers from Becoming Security Vulnerabilities

Radostina (Ina) Tsvetkova

Norwegian Directorate of Labour and Welfare (NAV), Senior Advisor in Digital Accessibility and Inclusive Design

Radostina (Ina) Tsvetkova

Related videos

WebAssembly: The Next Frontier of Cloud Computing thumbnail
57:32
LIVE • over 2 years ago

WebAssembly: The Next Frontier of Cloud Computing

Edoardo Dusi

WebAssembly: The Next Frontier of Cloud Computing thumbnail
30:58
World Congress 2024 • about 2 years ago

WebAssembly: The Next Frontier of Cloud Computing

Edo

WebAssembly Revolution: Elevating JavaScript's Reach and Performance thumbnail
30:57
World Congress 2024 • about 2 years ago

WebAssembly Revolution: Elevating JavaScript's Reach and Performance

Önder Ceylan

Wasm Deep Dive - A Glance Behind the Scenes thumbnail
57:45
LIVE • over 2 years ago

Wasm Deep Dive - A Glance Behind the Scenes

Rainer Stropek

WebAssembly: Disassembled thumbnail
27:27
World Congress 2023 • about 3 years ago

WebAssembly: Disassembled

Stefan Schöberl

From Bytes to Execution: Writing a WebAssembly Runtime in Rust thumbnail
25:16
World Congress 2026 Europe • about 2 months ago

From Bytes to Execution: Writing a WebAssembly Runtime in Rust

Gaurav Gahlot

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.