2022 Semi-conference about WASM (Edited 3)
Download as PPTX, PDF1 like298 views
The document outlines a semi-conference held on December 10, 2022, focused on WebAssembly (wasm) in South Korea, discussing its applications and challenges, including low awareness and high learning curves. It highlights various tools, resources, and case studies of wasm implementations like AWS Lambda and Adobe Photoshop in browsers. Additionally, it emphasizes the importance of wasm in enhancing security against ransomware attacks and its potential use in live e-commerce streaming services.
2022 Semi-conference about WASM (Edited 3)
- 1. 2022 Semi-conference about WASM On December 10, In the ASSEM conference room near GMP airport, South Korea Namhyeon Go <[email protected]>
- 2. How did you get to know the WebAssembly (WASM)? An acquaintance introduced it Social media (Twitter, Facebook, …) IT Journals (Security news, CIO, …) Company business Other No response
- 3. What are your areas of interest where the WebAssembly(WASM) is used? Cloud-based microservices (AWS, Azure, …) Web-based 3D (Unity, Unreal Engine, WebGL, …) Code trust (Cloud security, Document security, Malware response) Web based video processing/AI (FFmpeg, mediapipe, Radiology(Medical), …) Blockchain (Smart contract, eWASM, …) No response Other
- 4. Choose a WASM development tool or runtime that you've used or heard of. No response Other
- 5. What do you think are the difficulties in introducing the WebAssembly(WASM)? The awareness is low. The learning curve is too high. I don't know what it's used for. No active communities. No response Other
- 6. The main concept of WebAssembly https://hacks.mozilla.org/2019/08/webassembly-interface-types/
- 7. The main concept of WebAssembly https://medium.com/codex/extend-backend-application-with-webassembly-ba19c17016d3
- 8. Related books if you want to learn WASM in Korea Recommended books if you want learn WASM in Korean language
- 9. Bytecode Alliance (Lucet, Wasmtime, WAMR) https://hacks.mozilla.org/2019/11/announcing-the-bytecode-alliance/
- 14. eWASM (Ethereum WASM) https://nirolution.com/ethereum-ewasm/
- 16. “Hello World” of WebAsssembly https://opensource.com/article/21/3/hello-world-webassembly
- 17. WASM vs. X86 (Stack machines and assembly) https://stanford-cs242.github.io/f18/lectures/04-1-webassembly-practice.html
- 20. DWARF for WASM (Chrome) https://dwarfstd.org/ https://segmentfault.com/a/1190000040867861
- 21. DWARF for WASM (Wasmtime) https://docs.wasmtime.dev/examples-debugging.html#debugging-webassembly https://github.com/bytecodealliance/wasmtime/issues/932
- 23. LLVM to (general) ASM https://en.wikipedia.org/wiki/LLVM http://www.aosabook.org/en/llvm.html https://www.heavy.ai/technical-glossary/llvm
- 24. OBJDUMP (or useful tools for developers) for WASM? “Sure. You can do it.” https://github.com/WebAssembly/wabt
- 26. Remarkable case: Amazon Prime(OTT) https://www.amazon.science/blog/how-prime-video-updates-its-app-for-more-than-8-000-device-types
- 27. Remarkable case: WASM on AWS Lambda https://www.cncf.io/blog/2021/08/25/webassembly-serverless-functions-in-aws-lambda/
- 28. Remarkable case: Confidential computing https://github.com/enarx/enarx https://thenewstack.io/confidential-computing-with-webassembly/
- 29. Case: Photoshop on the browser https://www.bram.us/2021/10/27/adobe-photoshop-in-the-browser-thanks-to-emscripten-web-components-and-project-fugu/
- 30. Case: AutoCAD on the browser https://madewithwebassembly.com/showcase/autocad/
- 31. Case: Mediapipe on the browser https://blog.tensorflow.org/2020/03/face-and-hand-tracking-in-browser-with-mediapipe-and-tensorflowjs.html
- 32. Case: SuperTux on the browser https://www.supertux.org/ https://supertux.semphris.com/play/
- 33. Case: Visual Novel (in Japan) http://www.ies-net.com/
- 34. Can WASM support techs like JNI? • Although not completely the same • You can consider using a WASI socket • Or expanding a separate module with a dynamic link(*.so, *.dll) in the runtime itself. • If you need this, I recommend you to look into WAMR (WebAsssembly Micro Runtime) • https://github.com/bytecodealliance/wasm-micro-runtime
- 35. JVM LLVM WASM First appeared May 1995 May 2003 March 2017 Type of code Bytecode Bytecode Bytecode Size of runtime >130MB (Oracle JRE 7) N/A (Because this is a compiler for native system) <19MB (Wasmtime 3.0.1) Size of popular packages Very big (e.g. java.*, JWT, Spring, Android, …) N/A Small (e.g. libraries from C/C++) Size of the target application Big Almost small Small Allow to system access by default? Yes. No additional security processes such as file I/O, or connect network. Almost yes No. A code is strictly isolated in runtime. If you need escape must use WASI. Where is it usually deployed? Smartphone, TV, Desktop, … All targets of source code Web browser or web-based engine JVM, LLVM, WASM?
- 36. So, What is ASMNEXT interested in? • Office Automation and endpoint security • In South Korea, a ransomware delivery attack using the macro function of MS office and Korean Word Processor(HWP) has caused many victims, drawing attention as a big issue. • The ASMNEXT is working on ways to reduce this threat using the code isolation of WASM runtime. • Binary pattern matching on WASM • Using a library such as YARA (https://github.com/VirusTotal/yara) • WASM on PHP backend • PHP-based applications are often used with traditional word processors. I am looking for a successful way for both different applications to share the same logic. For example, Wordpress
- 37. Benchmark on shared Linux (e.g. Web hosting) https://github.com/gnh1201/wp-wamr
- 38. Where using WASM in Korea? • Shopping live, NAVER Corp (The biggest online platform like Google in Korea). • They are using WASM in a live e-commerce streaming service
- 39. Members of Bytecode Alliance https://bytecodealliance.org/