Shrinking Software Attack Surface with WebAssembly & CNCF Wasmcloud

on YouTube ↗30m

" summary

Demonstrates that WebAssembly plus CNCF wasmCloud turns libraries and platform glue into hot‑swappable capabilities so apps contain only business logic, shrinking attack surface and avoiding repeated vulnerable dependencies. Shows a Go webshell that runs in normal containers but breaks in a from‑scratch image, cites Samsung deploying to 8,000 CPU/OS combos, Adobe moving image processing from 400ms to 40ms in‑browser, and a bank failover between AWS and GCP; uses wasmCloud, gnats, WASI and Kubernetes to prove portability and a capability‑driven sandbox that actually works.

AI-written summary · about

" chapters (6)

1. 0:00Introduction and agenda
2. 1:16Limits of container security
3. 6:06Modern deployment challenges
4. 9:43WebAssembly as a solution
5. 16:37Reducing boilerplate code
6. 23:36WasmCloud and use cases

" related talks

• 40mWebAssembly - The Future of Distributed ComputingKevin Hoffman · Craft Conference 2022
• 32mCloud Native Apps with Server-Side WebAssemblyLiam Randall · KubeCon + CloudNativeCon North America 2021
• 18mCloud Native & WebAssembly: Better TogetherRalph Squillace, Liam Randall · KubeCon + CloudNativeCon Europe 2021
• 50mWebAssembly: A Recovering Kubernetes Engineer's View of the FutureTaylor Thomas · KCD Los Angeles 2023
• 28mWasm + Kubernetes: Beyond ContainersSean Isom, Colin Murphy · Cloud Native Wasm Day Europe 2023
• 33mWebAssembly: The Next Frontier of Cloud ComputingEdoardo Dusi · containerday 2023
• 08mKeynote: WebAssembly in a Containerized WorldBrendan Burns · WasmCon 2023
• 38mCloud-Native WebAssembly: Containerization On the EdgeMichael Yuan · KubeCon + CloudNativeCon North America 2022