Abstract
In the last decade, Serverless Computing has emerged as a revolution in the way applications are developed and deployed, allowing developers to focus exclusively on the logic of their applications and delegating infrastructure management to cloud service providers. This is why the adoption of Serverless Computing has grown rapidly due to its advantages in terms of scalability, cost and operational simplicity. However, like any emerging technology, the serverless model introduces new vulnerabilities and security threats that must be addressed to ensure data protection and application integrity. In this document, a systematic review of serveless computing in the field of cybersecurity is carried out, to analyze and identify the challenges and threats faced by serverless environments, as well as their benefits and the solutions proposed to address them. these challenges. The results of the review provide the current state of cybersecurity in serverless computing environments.
References
Barrak, A., Petrillo, F., & Jaafar, F. (2022). Serverless on Machine Learning: A Systematic Mapping Study. IEEE Access, 10, 99337-99352. https://doi.org/10.1109/ACCESS.2022.3206366
Bocci, A., Forti, S., Ferrari, G.L., & Brogi, A. (2021). Secure FaaS orchestration in the fog: ¿How far are we? Computing, 103(5), 1025-1056. https://doi.org/10.1007/s00607-021-00924-y
Carrera-Rivera, A., Ochoa, W., Larrinaga, F., & Lasa, G. (2022). How-to conduct a systematic literature review: A quick guide for computer science research. MethodsX, 9. https://doi.org/10.1016/j.mex.2022.101895
Ebrahimpour, H., Ashtiani, M., Bakhshi, F., & Bakhtiariazad, G. (2023). A heuristic-based package-aware function scheduling approach for creating a trade-off between cold start time and cost in FaaS computing environments. The Journal of Supercomputing, 79(11), 12142-12190. https://lc.cx/vUebib
Gill, S. S. (2024). Quantum and blockchain based Serverless edge computing: A vision, model, new trends and future directions. Internet Technology Letters, 7(1). https://doi.org/10.1002/itl2.275
Hassan, H. B., Barakat, S. A., & Sarhan, Q. I. (2021). Survey on serverless computing. Journal of Cloud Computing, 10(1), 39. https://doi.org/10.1186/s13677-021-00253-7
Kelly, D., Glavin, F. G., & Barrett, E. (2021). Denial of wallet—Defining a looming threat to serverless computing. Journal of Information Security and Applications, 60. https://doi.org/10.1016/j.jisa.2021.102843
Li, X., Leng, X., & Chen, Y. (2023). Securing Serverless Computing: Challenges, Solutions, and Opportunities. IEEE Network, 37(2), 166-173. https://doi.org/10.1109/MNET.005.2100335
Li, Y., Lin, Y., Wang, Y., Ye, K., & Xu, C. (2023). Serverless Computing: State-of-the-Art, Challenges and Opportunities. IEEE Transactions on Services Computing, 16(2), 1522-1539. https://doi.org/10.1109/TSC.2022.3166553
Li, Z., Guo, L., Cheng, J., Chen, Q., He, B., & Guo, M. (2022). The Serverless Computing Survey: A Technical Primer for Design Architecture. ACM Computing Surveys, 54(10), 1-34. https://doi.org/10.1145/3508360
Marin, E., Perino, D., & Di Pietro, R. (2022). Serverless computing: A security perspective. Journal of Cloud Computing, 11(1), 69. https://doi.org/10.1186/s13677-022-00347-w
Morabito, G., Sicari, C., Ruggeri, A., Celesti, A., & Carnevale, L. (2023). Secure-by-design serverless workflows on the Edge–Cloud Continuum through the Osmotic Computing paradigm. Internet of Things, 22. https://doi.org/10.1016/j.iot.2023.100737
Ortega Candel, J. M., Mora Gimeno, F. J., & Mora Mora, H. (2024). Generation of a dataset for DoW attack detection in serverless architectures. Data in Brief, 52. https://doi.org/10.1016/j.dib.2023.109921
Ouyang, R., Wang, J., Xu, H., Chen, S., Xiong, X., Tolba, A., & Zhang, X. (2023). A Microservice and Serverless Architecture for Secure IoT System. Sensors, 23(10), 4868. https://doi.org/10.3390/s23104868
Palma, G. D., Giallorenzo, S., Mauro, J., Trentin, M., & Zavattaro, G. (2023). Formally Verifying Function Scheduling Properties in Serverless Applications. IT Professional, 25(6), 94-99. https://doi.org/10.1109/MITP.2023.3333071
Park, J., Kang, S., Lee, S., Kim, T., Park, J., Kwon, Y., & Huh, J. (2024). Hardware-hardened Sandbox Enclaves for Trusted Serverless Computing. ACM Transactions on Architecture and Code Optimization, 21(1), 1-25. https://doi.org/10.1145/3632954
Wen, J., Chen, Z., Jin, X., & Liu, X. (2023). Rise of the Planet of Serverless Computing: A Systematic Review. ACM Transactions on Software Engineering and Methodology, 32(5), 1-61. https://doi.org/10.1145/3579643
Zhang, S., Luo, X., & Litvinov, E. (2021). Serverless computing for cloud-based power grid emergency generation dispatch. International Journal of Electrical Power & Energy Systems, 124. https://doi.org/10.1016/j.ijepes.2020.106366
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.