Web Application Firewalls Revisited
summary
Claims a modern WAF library called Coraza that implements OWASP CoreRuleSet and ships connectors for Envoy/Kong, Go middleware and Proxy‑WASM so rules run as WebAssembly across stacks. Demonstrates a working prototype that patches zero‑day behavior at network speed, reduces time-to-mitigate vs patch cycles, and targets east‑west service-to-service traffic rather than only ingress. Focuses on high throughput, low latency, adaptive rule updates and audit logs; shows real integrations and measurable operational tradeoffs.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:22What is a WAF
- 7:27Perimeter security challenges
- 10:40Zero trust principles
- 13:07Zero trust tenants
- 20:13Dynamic context-based access
- 23:25Zero trust WAF concept
- 25:32Protect service-to-service
- 27:15Mitigating zero-day with WAF
- 28:39Onboarding legacy safely
- 30:04Security vs performance tradeoffs
- 31:49Adaptive rules and audit logs
- 33:15Coraza WAF intro
- 35:44Coraza features
- 36:50Coraza performance
- 37:12Conclusion & Q&A
related talks
32mOWASP Coraza - Web Application Firewall
37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
23mCoraza Web Application Firewalls Revisited
55mOWASP Coraza: The Way To WAF In 2023- 37mSecuring Modern Apps with Zero Trust and Next-Gen Web Application Firewall
53mOWASP Coraza: Open Source WAF for Cloud Native Service Mesh
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...
46mIt is rough without a WAF