WebAssembly Component Model: Enhancing Security, Productivity, and...
summary
WebAssembly component model links independent components so only the vulnerable piece needs relinking not full rebuilds, demonstrated with a GitHub OAuth middleware component and a business-logic component composed via cargo component, wasm-tools and served with wasmtime then deployed with spin and wasmCloud across Fer myon and Cosmonic clouds. The talk cites 87% of container images with high/critical CVEs but only 15% actually execute vulnerable code, shows a working demo, and argues this cuts rebuilds and energy use.
AI-written summary · about
chapters (15)
- 0:00WebAssembly intro and evolution
- 2:09WASM module properties
- 3:52Component Model explained
- 7:01Security challenges
- 8:05Component-based apps
- 9:30Demo setup and tools
- 11:15Authentication demo run
- 13:04Vulnerability mitigation
- 16:36Developer productivity boost
- 18:40Portability and lock-in
- 20:06Deploy to Fermion Cloud
- 21:13Deploy to Cosmic Cloud
- 21:58Portability recap
- 22:39Get involved
- 23:24Q&A
related talks
01h 01mAn introduction to WebAssembly components
16mThe nuts and bolts of WebAssembly's component model
36mBootstrapping Ecosystems: Unveiling the Power of the Component Model
30mShrinking Software Attack Surface with WebAssembly & CNCF Wasmcloud
08mKeynote: WASI Standards and the Component Model: Transforming Application Development Forever
18mAn introduction to the WebAssembly component model
36mUsing Server-side WebAssembly Components to Build Next-Gen Architectures
30mWasm Component Composition: A New Era of Language Interoperability