WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Aug 11, 2023

Using WebAssembly to run, extend, and secure your application

Niels Tanis

WebAssembly has outgrown the browser. It is now a powerhouse for backend security. Learn how WASI sandboxing neutralizes supply chain threats in your cloud-native apps.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to WebAssembly as a compilation target

WebAssembly acts as a high-performance compilation target capable of natively executing logic across diverse application environments.

#2 about 2 min

Early implementations of WebAssembly across major industries

Engineering teams rapidly adapted WebAssembly to migrate monolithic application code into the browser and target multiple platforms simultaneously.

#3 about 2 min

Core design principles of the WebAssembly standard

WebAssembly prioritizes fast binary instructions, readable code structures, default sandboxing, and strict backward compatibility to ensure web stability.

#4 about 1 min

Memory isolation and module ownership in WebAssembly

WebAssembly restricts memory access entirely by confining module operations to a specific contiguous mutable array without cross-module visibility.

#5 about 1 min

Enforcing code flow integrity within WebAssembly executions

The core compilation phase embeds execution maps that instantly panic and halt code flow upon detecting logical deviations.

#6 about 2 min

Running framework execution engines inside the browser

Standard framework engines compiled into WebAssembly transform default virtual machines into functional browser executables using JavaScript bridges.

#7 about 3 min

Extending capabilities with the WebAssembly System Interface

The Bytecode Alliance created WASI to safely expose external system interactions and host capabilities inside strict non-web boundaries.

#8 about 1 min

The coexistence of Docker and WebAssembly modules

Lightweight module deployments integrate alongside traditional Docker frameworks to increase system flexibility and reduce runtime footprint overhead.

#9 about 4 min

Enforcing local file permissions with capability-based security

Enforcing strict capability-based authorization parameters entirely prevents isolated modules from interacting with native system files without explicit flags.

#10 about 4 min

Extending managed applications with external Rust components

Cross-language setups require strict directory mapping constraints to maintain strong capability-based protections when calling external module dependencies.

#11 about 4 min

Preventing dependency vulnerabilities with the component model

Isolating transitive operations inside nanoprocesses effectively blocks vulnerable external packages from automatically inheriting system access rights.

#12 about 4 min

Testing the security posture of WebAssembly runtimes

Rigorous security audits and systematic fuzzing verify that underlying runtime engines gracefully resist unauthorized execution attempts.

Matching moments

1:32 min

Core principles and security model of WebAssembly

Stefan Schöberl · World Congress 2023

4:54 min

The origins and design principles of WebAssembly

Maurice Brinkmann · World Congress 2023

3:36 min

Core concepts of WebAssembly portability and sandboxed execution

Gaurav Gahlot Gaurav Gahlot · World Congress 2026 Europe

2:40 min

Core concepts and execution mechanics of WebAssembly modules

Edo Edo · World Congress 2024

5:06 min

Origins and design goals of WebAssembly

Matt Butcher · World Congress 2023

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · World Congress 2024

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
almost 3 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Related videos

WebAssembly: The Next Frontier of Cloud Computing thumbnail
57:32
LIVE • over 2 years ago

WebAssembly: The Next Frontier of Cloud Computing

Edoardo Dusi

WebAssembly: The Next Frontier of Cloud Computing thumbnail
30:58
World Congress 2024 • about 2 years ago

WebAssembly: The Next Frontier of Cloud Computing

Edo

WebAssembly Revolution: Elevating JavaScript's Reach and Performance thumbnail
30:57
World Congress 2024 • about 2 years ago

WebAssembly Revolution: Elevating JavaScript's Reach and Performance

Önder Ceylan

Wasm Deep Dive - A Glance Behind the Scenes thumbnail
57:45
LIVE • over 2 years ago

Wasm Deep Dive - A Glance Behind the Scenes

Rainer Stropek

WebAssembly: Disassembled thumbnail
27:27
World Congress 2023 • about 3 years ago

WebAssembly: Disassembled

Stefan Schöberl

From Bytes to Execution: Writing a WebAssembly Runtime in Rust thumbnail
25:16
World Congress 2026 Europe • 3 months ago

From Bytes to Execution: Writing a WebAssembly Runtime in Rust

Gaurav Gahlot

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.