Lightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...

on YouTube ↗11m

" summary

Claims that WebAssembly plugins let a WAF run inside Envoy sidecars to enforce zero trust per-hop protection, using the Proxy-Wasm API and a WAF like Coraza compiled to Wasm (supports CRS 4). Shows request and response inspection, anomaly scoring, audit logs that say which rule and score caused a block, and discusses config updates via a gRPC rules stream (faster than full sidecar redeploy). Notes PCI DSS will require WAF by March 2025 and ~30% of mesh leaders request WAF.

AI-written summary · about

" chapters (5)

1. 0:00Introduction
2. 0:17What is a WAF
3. 1:00Why use WAF
4. 2:45Zero Trust
5. 6:35Questions

" related talks

• 38mWeb Application Firewalls RevisitedJosé Carlos Chávez · Øredev 2023
• 37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application FirewallJosé Carlos Chávez · Open Source Summit Europe 2023
• 37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application FirewallJosé Carlos Chávez · CloudOpen @ Open Source Summit Europe 2023
• 21mWAF Wars - The art of blocking attacks while having a coffeeMarcus Limna · GambiConf 2023
• 55mOWASP Coraza: The Way To WAF In 2023Juan Pablo Tosso, Felipe Zipitria · Global AppSec Dublin 2023
• 10mSponsored Keynote: What can WebAssembly do for your Application Security and Extens...Takaya Saeki · Cloud Native Wasm Day Europe 2021
• 08mLightning Talk: Build trusted cloud apps with Wasm: WebAssembly Micro Runtime is readyXin Wang · Cloud Native Wasm Day Europe 2021
• 53mOWASP Coraza: Open Source WAF for Cloud Native Service MeshZufar Dhiyaulhaq · OWASP Global AppSec Singapore 2023