Open Collections

Moghimi, Arshia

University of British Columbia

Serverless computing is an emerging paradigm that eases the process of application deployment by removing the burden of infrastructure provisioning, management, and scaling from the developers and letting them focus only on the application logic. However, the current state of serverless is not truly “server-less” as it requires developers to get involved in configuring their applications’ deployment settings; settings that can highly affect the performance, cost, and security of the applications. To name some, developers need to choose the amount of resources allocated to an application, set a proper timeout limit, manually specify the accesses required for its operation, and so on. This thesis takes a step towards enabling a true serverless experience by automating resource configuration and setting security requirements for a serverless application. In the first part of this thesis, we focus on resource allocation for serverless applications. We introduce Parrotfish as a novel tool to rightsize serverless applications. Parrotfish builds accurate performance models for serverless applications that allow us to suggest optimal resource configurations based on the developers’ constraints. The second part of the thesis primarily focuses on automating the security configuration of serverless applications by introducing Growlithe. Growlithe creates an abstract dataflow graph of the serverless application, allowing the tool to generate the required security policies automatically. This dataflow graph also enables fine-grained taint tracking, which can be leveraged to support richer security policies not currently supported by serverless security frameworks. The proposed solutions to automate serverless resource and security configurations contribute to creating a true serverless experience for the developers.

Text

2024-09-26

Attribution-NonCommercial-NoDerivatives 4.0 International

http://hdl.handle.net/2429/89307

Electrical and Computer Engineering

University of British Columbia

UBCV

http://creativecommons.org/licenses/by-nc-nd/4.0/