WAF Wars - The art of blocking attacks while having a coffee
summary
Explains using WebAssembly in proxy environments to implement a web application firewall (WAF), showing how a WAF can integrate with different proxy technologies. Covers concrete WebAssembly-based proxy approaches and interoperability patterns for blocking attacks while operating within various proxy stacks.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 1:06What is a WAF
- 2:13ModSecurity and its legacy
- 3:41ModSecurity rules
- 5:09Detection responses focus
- 6:14ModSecurity end of support
- 7:22Coraza open source solution
- 8:47Coraza architecture
- 10:10WebAssembly and Envoy
- 11:58ABI System Interface
- 13:23Envoy integration
- 14:50WASM portability
- 15:54Coraza in production
- 17:19WASM advantages
- 18:22Challenges and limitations
- 18:43Q&A
related talks
38mWeb Application Firewalls Revisited
11mLightning Talk: Use Wasm to Deploy WAF Deeper in the Service Mesh for Zero Trust and...
40mWAF Made Easy
42mDon’t use a WAF, and when you should, anyway.
10mSponsored Keynote: What can WebAssembly do for your Application Security and Extens...
01h 04mProtect Your Applications with Azure WAF and Application Gateway
43mMaking WAF Mainstream: From Static Defenses to... (Roy Weisfeld, Surya Pentakota)
55mOWASP Coraza: The Way To WAF In 2023