Using WebAssembly to run, extend, and secure your application

Docker's co-founder said if WASM existed in 2008, Docker wouldn't be necessary. Learn why this secure runtime is revolutionizing server-side applications.

#1about 3 minutes

Understanding WebAssembly and its initial industry adoption

WebAssembly is a portable binary format first used to run existing C codebases like AutoCAD in the browser and to build cross-platform SDKs for services like Disney+.

#2about 3 minutes

Exploring the foundational security features of WebAssembly

WebAssembly ensures security by default through isolated linear memory for each module and control flow integrity that prevents unintended code execution paths.

#3about 1 minute

How .NET applications execute on WebAssembly

.NET applications run on WebAssembly by compiling the .NET runtime (CLR) itself into a WASM module, which then interprets the standard .NET DLLs.

#4about 3 minutes

Taking WebAssembly beyond the browser with WASI

The WebAssembly System Interface (WASI) provides a standard API for running WASM modules outside the browser, enabling server-side applications with a capability-based security model.

#5about 4 minutes

Securing file system access in a .NET WASI application

A practical demonstration shows how a .NET application running on Wasmtime is denied file system access by default and requires explicit permissions to be granted.

#6about 3 minutes

Using a Rust WASM module to extend a .NET application

This example demonstrates how to extend a .NET host application with a WebAssembly module written in Rust, while still enforcing strict, capability-based security policies.

#7about 3 minutes

Securing dependencies with the nano-process model

The nano-process concept provides a fine-grained sandbox for each module, preventing malicious or vulnerable dependencies from gaining unauthorized access to system resources.

#8about 3 minutes

Ensuring the security and correctness of the WASM runtime

The security of the entire ecosystem relies on the runtime, and projects like Wasmtime use Rust, formal verification, and fuzzing to ensure its correctness and robustness.