Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall
summary
Zero trust reframes access decisions as per-request, context-driven policies enforced at each workload and a WAF becomes a Policy Enforcement Point protecting east‑west traffic as well as internet ingress. It introduces Coraza — an open source ModSecurity‑compatible WAF library that runs as a native Go module, Envoy/istio connector and in the browser via proxy‑wasm, focuses on low CPU/memory for per‑hop deployment, supports OWASP CoreRuleSet and pluggable rate‑limit and anomaly scoring, and ships to replace mod_security for cloud native rollouts.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:27Traditional WAF features
- 6:30Perimeter security limits
- 10:17Zero Trust principles
- 17:26Zero Trust architecture
- 19:52WAF in Zero Trust
- 22:43Designing Zero Trust WAF
- 26:59Coraza open-source WAF
- 29:48Conclusion and complementary security layers
- 30:34Q&A
related talks
37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
38mWeb Application Firewalls Revisited
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...
23mCoraza Web Application Firewalls Revisited
55mOWASP Coraza: The Way To WAF In 2023
32mOWASP Coraza - Web Application Firewall
53mOWASP Coraza: Open Source WAF for Cloud Native Service Mesh
39mProtect Your Application, Not the Network. Add Zero Trust Superpowers to Your Critical...