Securing Serverless Workflows on the Cloud Edge Continuum

Abstract

Serverless Computing is an emergent solution that helps deploy applications in the Cloud and sometimes on the Edge, reducing the integration time and the maintenance cost of the data centers. The lack of a standard for functions and the impossibility of connecting them together in complex workflows is currently holding back the growth of Function-as-a-Service (FaaS) use. In this scenario, OpenWolf tries to overcome these issues by implementing a solution to spread functions over the Cloud-Edge Continuum and connecting them using a standardized Domain-Specific Language (DSL) to describe a serverless based workflow. In this work, we aim to enhance the OpenWolf project, solving many security threats the engine suffers, like the authenticated and authorized execution of workflows and the injection of malicious functions inside a workflow. We will validate this new version of OpenWolf in a Smart City surveillance scenario, providing validation and performance tests.