WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
World Congress 2023 • Aug 11, 2023

Using WebAssembly to run, extend, and secure your application

Niels Tanis

WebAssembly has outgrown the browser. It is now a powerhouse for backend security. Learn how WASI sandboxing neutralizes supply chain threats in your cloud-native apps.

Pause
Mute Enter Fullscreen
#1 about 2 min

Introduction to WebAssembly as a compilation target

WebAssembly acts as a high-performance compilation target capable of natively executing logic across diverse application environments.

#2 about 2 min

Early implementations of WebAssembly across major industries

Engineering teams rapidly adapted WebAssembly to migrate monolithic application code into the browser and target multiple platforms simultaneously.

#3 about 2 min

Core design principles of the WebAssembly standard

WebAssembly prioritizes fast binary instructions, readable code structures, default sandboxing, and strict backward compatibility to ensure web stability.

#4 about 1 min

Memory isolation and module ownership in WebAssembly

WebAssembly restricts memory access entirely by confining module operations to a specific contiguous mutable array without cross-module visibility.

#5 about 1 min

Enforcing code flow integrity within WebAssembly executions

The core compilation phase embeds execution maps that instantly panic and halt code flow upon detecting logical deviations.

#6 about 2 min

Running framework execution engines inside the browser

Standard framework engines compiled into WebAssembly transform default virtual machines into functional browser executables using JavaScript bridges.

#7 about 3 min

Extending capabilities with the WebAssembly System Interface

The Bytecode Alliance created WASI to safely expose external system interactions and host capabilities inside strict non-web boundaries.

#8 about 1 min

The coexistence of Docker and WebAssembly modules

Lightweight module deployments integrate alongside traditional Docker frameworks to increase system flexibility and reduce runtime footprint overhead.

#9 about 4 min

Enforcing local file permissions with capability-based security

Enforcing strict capability-based authorization parameters entirely prevents isolated modules from interacting with native system files without explicit flags.

#10 about 4 min

Extending managed applications with external Rust components

Cross-language setups require strict directory mapping constraints to maintain strong capability-based protections when calling external module dependencies.

#11 about 4 min

Preventing dependency vulnerabilities with the component model

Isolating transitive operations inside nanoprocesses effectively blocks vulnerable external packages from automatically inheriting system access rights.

#12 about 4 min

Testing the security posture of WebAssembly runtimes

Rigorous security audits and systematic fuzzing verify that underlying runtime engines gracefully resist unauthorized execution attempts.

Matching moments

1:32 min

Core principles and security model of WebAssembly

Stefan Schöberl · World Congress 2023

4:54 min

The origins and design principles of WebAssembly

Maurice Brinkmann · World Congress 2023

3:36 min

Core concepts of WebAssembly portability and sandboxed execution

Gaurav Gahlot Gaurav Gahlot · World Congress 2026 Europe

2:40 min

Core concepts and execution mechanics of WebAssembly modules

Edo Edo · World Congress 2024

5:06 min

Origins and design goals of WebAssembly

Matt Butcher · World Congress 2023

2:27 min

Introduction to WebAssembly in a cloud computing context

Edo Edo · World Congress 2024

More from World Congress 2023

The year 3000, a brief history of Web Development thumbnail
25:30
over 2 years ago

The year 3000, a brief history of Web Development

Lorenzo Pieri

Demografie nutzen um jedem Bewerber das passende Angebot zu machen! thumbnail
8:52
almost 3 years ago

Demografie nutzen um jedem Bewerber das passende Angebot zu machen!

Nathalie Gierth

Guided Memory Management: Rust's Ownership Model thumbnail
0:18
almost 3 years ago

Guided Memory Management: Rust's Ownership Model

Stefan Baumgartner

Passwordless future: WebAuthn and Passkeys in practice thumbnail
32:32
almost 3 years ago

Passwordless future: WebAuthn and Passkeys in practice

Clemens Hübner

External Secrets Operator: the secrets management toolbox for self-sufficient teams thumbnail
30:07
almost 3 years ago

External Secrets Operator: the secrets management toolbox for self-sufficient teams

Moritz Johner

Building Reliable Serverless Applications with AWS CDK and Testing thumbnail
25:18
almost 3 years ago

Building Reliable Serverless Applications with AWS CDK and Testing

Raphael Manke

Upcoming sessions on this topic

Open session

World Congress 2026 North America

September 25, 2026 · 16:15–16:25

Outdoor Stage

Silent Execution: Defending Against Install-Time Supply Chain Attacks

Chris DeMars

Senior Developer Advocate at TuxCare

Chris DeMars
Open session

World Congress 2026 North America

September 25, 2026 · 12:30–14:30

Stage 13

Docker sandboxes: protect your secrets, tokens, and personal data from AI agent mistakes

Kristiyan Velkov

Developer Relations Engineer at Zerops.io

Kristiyan Velkov
Open session

World Congress 2026 North America

September 24, 2026 · 14:50–15:20

Stage 1

The Era of Machine-Driven Defense is Here: Headless Security

Loris Degioanni

Founder & CTO of Sysdig

Loris Degioanni
Open session

World Congress 2026 North America

September 24, 2026 · 11:40–12:10

Stage 3

Stop Running Mystery Meat in Production

Jeroen van Erp

Technology Advocate @ SUSE

Jeroen van Erp
Open session

World Congress 2026 North America

September 23, 2026 · 15:45–17:45

Stage 10

Securing the Agentic Stack: Docker Hardened Images and Supply Chain Security

Ajeet Raina

Developer Advocate at Docker

Ajeet Raina
Open session

World Congress 2026 North America

September 24, 2026 · 10:20–10:50

Stage 1

The Browser Is Becoming an AI Runtime

Ajit Varma, Will Bryk, Julia Love

Ajit Varma
Will Bryk
Julia Love

Related videos

WebAssembly: The Next Frontier of Cloud Computing thumbnail
57:32
LIVE • over 2 years ago

WebAssembly: The Next Frontier of Cloud Computing

Edoardo Dusi

WebAssembly: The Next Frontier of Cloud Computing thumbnail
30:58
World Congress 2024 • about 2 years ago

WebAssembly: The Next Frontier of Cloud Computing

Edo

WebAssembly Revolution: Elevating JavaScript's Reach and Performance thumbnail
30:57
World Congress 2024 • about 2 years ago

WebAssembly Revolution: Elevating JavaScript's Reach and Performance

Önder Ceylan

Wasm Deep Dive - A Glance Behind the Scenes thumbnail
57:45
LIVE • over 2 years ago

Wasm Deep Dive - A Glance Behind the Scenes

Rainer Stropek

WebAssembly: Disassembled thumbnail
27:27
World Congress 2023 • about 3 years ago

WebAssembly: Disassembled

Stefan Schöberl

From Bytes to Execution: Writing a WebAssembly Runtime in Rust thumbnail
25:16
World Congress 2026 Europe • 3 months ago

From Bytes to Execution: Writing a WebAssembly Runtime in Rust

Gaurav Gahlot

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.