.png){kind=icon}
.png){kind=icon}
Return
Enhancing Serverless Function Resilience Against Vulnerabilities with MoFaaS
.png){kind=icon}
OA
AI
DOI：10.1007/s10922-026-10054-5.png)
.png){kind=icon}
.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Serverless computing has revolutionized cloud application development by eliminating infrastructure management complexities. However, its dynamic and ephemeral nature introduces security challenges that are difficult to mitigate using traditional mechanisms. In particular, function vulnerabilities remain a critical concern, as attackers can exploit them to compromise applications and escalate attacks across multi-tenant environments. To address these challenges, we propose an enhanced version of Moving Functions as a Service (MoFaaS), a security mechanism that leverages Moving Target Defense (MTD) and N-Version Programming (NVP) to introduce execution diversity and improve fault tolerance in serverless applications. Additionally, we incorporate a Large Language Model (LLM)-based feedback loop to assist developers in generating diverse function variants with reduced effort. We validate our contributions through open-source Proof of Concept (PoC) implementations on Knative and conduct an extensive security and performance evaluation on a realistic serverless application. The results demonstrate that our approach effectively increases attack complexity while maintaining performance within acceptable bounds.
Keywords:
Serverless
Function as a service (FaaS)
Moving target defense (MTD)
N-version programming (NVP)
Cloud computing
Cloud security
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
3.9
Papers:
1.0K
Citations:
1.3K