Valve: Securing Function Workflows on Serverless Computing Platforms
Pubali Datta, Prabuddha Kumar, Tristan Morris, Michael Grace, Amir Rahmati, Adam Bates
Abstract
Serverless Computing has quickly emerged as a dominant cloud computing paradigm, allowing developers to rapidly prototype event-driven applications using a composition of small functions that each perform a single logical task. However, many such application workflows are based in part on publicly-available functions developed by third-parties, creating the potential for functions to behave in unexpected, or even malicious, ways. At present, developers are not in total control of where and how their data is flowing, creating significant security and privacy risks in growth markets that have embraced serverless (e.g., IoT).
Topics & Concepts
WorkflowComputer scienceTask (project management)Cloud computingFunction (biology)Computer securityEvent (particle physics)Distributed computingInternet of ThingsDatabaseOperating systemEngineeringSystems engineeringEvolutionary biologyPhysicsQuantum mechanicsBiologySecurity and Verification in ComputingCloud Data Security SolutionsCloud Computing and Resource Management