Towards a Security-Aware Benchmarking Framework for Function-as-a-Service

TL;DR

This paper proposes a security-aware benchmarking framework for Function-as-a-Service (FaaS) to evaluate performance and security vulnerabilities in real-world cloud environments, addressing challenges posed by FaaS's abstraction of infrastructure.

Contribution

It introduces an architectural design and metrics for benchmarking FaaS, emphasizing security considerations and vulnerability detection capabilities.

Findings

Initial framework design outlined

Benchmarking metrics proposed

Potential for security vulnerability identification

Abstract

In a world, where complexity increases on a daily basis the Function-as-a-Service (FaaS) cloud model seams to take countermeasures. In comparison to other cloud models, the fast evolving FaaS increasingly abstracts the underlying infrastructure and refocuses on the application logic. This trend brings huge benefits in application and performance but comes with difficulties for benchmarking cloud applications. In this position paper, we present an initial investigation of benchmarking FaaS in close to reality production systems. Furthermore, we outline the architectural design including the necessary benchmarking metrics. We also discuss the possibility of using the proposed framework for identifying security vulnerabilities.