Back To Schedule
Tuesday, October 31 • 11:30am - 12:15pm
Using WebAssembly to run, extend, and secure your application!

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
WebAssembly (WASM) has come a long way since its first release in 2017. As a technology stack running inside the web browser, it even allows products like Adobe Photoshop to run in that context, and with for example Blazor WebAssembly .NET runs inside of the browser as well. Now, WASM is expanding beyond the browser to run in a server-based context. With the introduction of WebAssembly System Interface (WASI), the technology leverages a standardized API that allows it to run on any system that supports it, for example to support cloud-based workloads.
Had WASM and WASI been around in 2009, Docker would not have existed according to one of its founders, Solomon Hykes. WASM has a strong security posture given how it works with linear memory space and how it supports a sandboxed-based environment called “nano-process”, which uses a capabilities-based security model. Users can even take any language that targets WASM and, with the help of WASI, run it on a Trusted Execution Environment (TEE) to add an additional layer of security.

In this session we'll start out with going through some of the basic security features of WASM and then move to running and extending an application it with WASM. After that we'll focus on the security features and run on a TEE and use the sandbox and the capabilities based security model to limit what it's allowed to do in both in resources and compute.

avatar for Niels Tanis

Niels Tanis

Sr. Principal Security Researcher, Veracode
Niels Tanis has got a background in .NET development, pentesting and security consultancy. He is Microsoft MVP and has been involved in breaking, defending and building secure applications. He joined Veracode in 2015 and right now he works as a security researcher on a variant of... Read More →

Tuesday October 31, 2023 11:30am - 12:15pm EDT
Room: Independence Ballroom A-E