Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall
Talkat Open Source Summit Europe 2023 · on Wednesday, 2023-09-20· at 15:55· Room 0E-1 (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Argues that Zero Trust doesn’t replace WAFs but relocates them to per-workload policy enforcement, and demonstrates a concrete toolchain: Coraza — an open source WAF library compatible with OWASP CoreRuleSet and mod_security rules — with connectors for Go, Caddy, Envoy/Istio and proxy-wasm, a browser-playground compiled to WebAssembly, a plugin API (GSoC rate‑limit plugin) and performance/memory tuning aimed at sidecar/PDP deployment.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:27Traditional WAF features
- 6:30Perimeter security limits
- 10:17Zero Trust principles
- 17:26Zero Trust architecture
- 19:52WAF in Zero Trust
- 22:43Designing Zero Trust WAF
- 26:59Coraza open-source WAF
- 29:48Conclusion and complementary security layers
- 30:34Q&A
related talks
37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
38mWeb Application Firewalls Revisited
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...
23mCoraza Web Application Firewalls Revisited
55mOWASP Coraza: The Way To WAF In 2023
32mOWASP Coraza - Web Application Firewall
53mOWASP Coraza: Open Source WAF for Cloud Native Service Mesh
46mIt is rough without a WAF