SMAF:a secure and makespan-aware framework for executing serverless workflows  

作　　者：Shuai ZHANG Yunfei GUO Zehua GUO Hongchao HU Guozhen CHEN 

机构地区：[1]Institute of Information Technology,Information Engineering University,Zhengzhou 450002,China [2]School of Automation,Beijing Institute of Technology,Beijing 100081,China [3]Purple Mountain Laboratories,Nanjing 211111,China

出　　处：《Science China(Information Sciences)》2023年第3期291-292,共2页中国科学（信息科学）（英文版）

基　　金：supported by National Natural Science Foundation of China(Grant Nos.62072467,62002019,62002383);National Key Research and Development Plan of China(Grant Nos.2021YFB1006200,2021YFB1006201);Beijing Institute of Technology Research Fund Program for Young Scholars.

摘　　要：Serverless computing,or function-as-a-service(FaaS),is an emerging service provision paradigm in cloud computing.Workflow,which comprises a set of tasks with datadependent on each other,is a typical application abstract model in clouds.Generally,applications in serverless computing can be modeled by serverless workflow,in which multiple functions are orchestrated together as a workflow to provide an integrated service[1].However,serverless workflows face severe security threats.Specifically,attackers can exploit the vulnerabilities of the function to achieve its goals,such as stealing sensitive data,damaging the execution of the functions,and tampering with the intermediate results.Furthermore,the lightweight nature of serverless functions makes it difficult to deploy the traditional“reinforced”and“stacked”defense mechanisms,which makes its security problem more challenging[2].Inspired by a proactive defense mechanism,such as moving target defense(MTD),enabling dynamic at the serverless functions can increase the security by weakening the cyber kill chain(CKC)for attackers.However,the dynamic-based solutions inevitably influence the execution of the serverless workflow and lead to additional makespan costs.Therefore,it is challenging to maintain high security and low makespan for executing serverless workflows.

关 键 词：SERVER SERVICE SERVER 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]