Serverless computing is a new cloud service model that reduces both cloud providers' and consumers' costs through extremely agile development, operation, and charging mechanisms and has been widely applied since its emergence. Nevertheless, some characteristics of serverless computing, such as fragmented application boundaries, have raised new security challenges. Considerable literature work has been committed to addressing these challenges. Commercial and open-source serverless platforms implement many security measures to enhance serverless environments. This paper presents the first survey of serverless security that considers both literature work and industrial security measures. We summarize the primary security challenges, analyze corresponding solutions from the literature and industry, and identify potential research opportunities. Then, we conduct a gap analysis of the academic and industrial solutions as well as commercial and open-source serverless platforms' security capabilities, and finally, we present a complete picture of current serverless security research.
翻译：无服务器计算是一种新的云服务模式,它通过极灵活的开发、运行和充电机制降低云源提供者和消费者的成本,并自其出现以来得到广泛应用。然而,一些无服务器计算的特点,如零碎的应用边界,带来了新的安全挑战。大量文献工作致力于应对这些挑战。没有商业和开放源码软件的服务器平台实施了许多安全措施,以改善无服务器环境。本文介绍了首次无服务器安全调查,其中既考虑了文献工作,也考虑了工业安全措施。我们总结了主要的安全挑战,分析了文学和工业的相应解决方案,并确定了潜在的研究机会。然后,我们对学术和工业解决方案以及商业和开放源码软件服务器平台的安全能力进行了差距分析,最后,我们全面介绍了目前无服务器安全研究的情况。
相关内容
微信扫码咨询专知VIP会员