AWSomePy: A Dataset and Characterization of Serverless Applications
AWSomePy: A Dataset and Characterization of Serverless Applications
复制标题
AWSomePy：无服务器应用程序的数据集和特征
DOI：
10.1145/3592533.3592811
复制
发表时间：
2023
期刊：
影响因子：
--
通讯作者：
Raffa G
中科院分区：
文献类型：
--
作者：
Raffa G
在过去的几年里，无服务器计算模式变得越来越流行。由于其成本效益和依赖云提供商管理底层基础设施的可能性，使用无服务器平台的公司可以完全专注于开发其产品的业务逻辑。然而，采用无服务器模式也意味着面临一些性能、可追溯性和安全性相关的挑战。其中一些问题可以通过分析现实世界的应用程序和确定关键趋势来解决，因为这些可以指导新模型和工具的开发。尽管如此，很少有最新的信息，这种趋势是目前在literation.In这项工作中，我们收集和解释的信息，可以利用分析serverless应用程序。为了实现我们的目标，我们研究了一组用Python为Amazon Web Services（AWS）平台开发的应用程序。我们首先进行架构分析，以确定特定于无服务器的参数，例如，部署工具中使用的插件以及事件和处理程序的数量。然后，我们执行应用程序代码级分析，以确定开发人员最常用的云服务和API。我们的研究结果表明，粒度定义的处理程序权限是不常见的做法。此外，开发人员利用配置服务和云资源的编程创建，从而增加了难以静态分析的工作流。我们的数据集AWSomePy是公开的，以支持未来的研究工作。
Over the last few years, the serverless computing paradigm has become increasingly popular. Thanks to its cost-effectiveness and the possibility of relying on a cloud provider to manage the underlying infrastructure, companies making use of serverless platforms can fully focus on developing the business logic of their products. However, adopting the serverless model also implies facing several performance, traceability and security-related challenges. Some of them can be tackled by analysing real-world applications and identifying key trends, as these can guide the development of novel models and tools. In spite of this, little up-to-date information on such trends is currently available in the literature.In this work, we gather and interpret information that can be leveraged to analyse serverless applications. To achieve our goal, we study a set of applications developed in Python for the Amazon Web Services (AWS) platform. We first conduct an architectural analysis to identify serverless-specific parameters, e.g., plugins used in deployment tools and the number of events and handlers. We then perform an application code-level analysis in order to establish which cloud services and APIs developers use most frequently. Our results show that granular definition of handler permissions is not common practice. Furthermore, developers make use of configuration services and programmatic creation of cloud resources, thus adding workflows difficult to analyse statically. Our dataset, AWSomePy, is publicly available to support future research work.
DOI：
10.1145/3427228.3427665
发表时间：
2020-12
期刊：
Proceedings of the 36th Annual Computer Security Applications Conference
影响因子：
--
作者：
A. Sankaran;Pubali Datta;Adam Bates
通讯作者：
A. Sankaran;Pubali Datta;Adam Bates
分析基础架构作为防止更新内狙击漏洞的代码
DOI：
10.1007/978-3-030-72013-1_6
发表时间：
2021-02-26
期刊：
Tools and Algorithms for the Construction and Analysis of Systems
影响因子：
--
作者：
Lepiller J;Piskac R;Schäf M;Santolucito M
通讯作者：
Santolucito M