UTD24 Research Publishing
Systems, Networks and Secure Computing

Secure Serverless Workflows: Identity, Isolation, and Recoverable Execution

Read & download PDF
Abstract

This systems review examines secure execution of serverless workflows. The organizing question is how short-lived functions can preserve identity, isolation, state integrity, and recoverable semantics across services. Ten related scholarly sources are synthesized through a decision-centered framework spanning problem definition, mechanism, measurement, evaluation, implementation, and governance. The review does not invent experiments, pooled estimates, or unreported quantitative results. It instead evaluates the strength and transferability of the available evidence, with particular attention to equating ephemeral execution with a reduced attack surface. The resulting framework links technical or empirical performance to explicit use conditions and identifies tests that should precede wider adoption in event-driven cloud applications.

Keywords
serverless computingworkflow securitycloud isolationidentityrecovery
References
  1. Cinar, B. (2023). The Rise of Serverless Architectures: Security Challenges and Best Practices. Asian Journal of Research in Computer Science, 16(4), 194-210. https://doi.org/10.9734/ajrcos/2023/v16i4382 DOI
  2. Escaleira, P., Cunha, V. A., Barraca, J. P., Gomes, D., & Aguiar, R. L. (2025). A systematic review on security mechanisms for serverless computing. Cluster Computing, 28(7). https://doi.org/10.1007/s10586-025-05371-4 DOI
  3. John, A., Muenzen, K., & Ausmees, K. (2021). Evaluation of serverless computing for scalable execution of a joint variant calling workflow. PLoS ONE, 16(7), e0254363. https://doi.org/10.1371/journal.pone.0254363 DOI
  4. Liang, H., Zhang, S., Liu, X., Cheng, G., Ma, H., & Wang, Q. (2024). SMWE: A Framework for Secure and Makespan-Oriented Workflow Execution in Serverless Computing. Electronics, 13(16), 3246. https://doi.org/10.3390/electronics13163246 DOI
  5. Marin, E., Perino, D., & Pietro, R. D. (2022). Serverless computing: a security perspective. Journal of Cloud Computing Advances Systems and Applications, 11(1). https://doi.org/10.1186/s13677-022-00347-w DOI
  6. Morabito, G., Sicari, C., Ruggeri, A., Celesti, A., & Carnevale, L. (2023). Secure-by-design serverless workflows on the Edge–Cloud Continuum through the Osmotic Computing paradigm. Internet of Things, 22, 100737. https://doi.org/10.1016/j.iot.2023.100737 DOI
  7. Ni, K., Mondal, S. K., Kabir, H. M. D., Tan, T., & Dai, H. N. (2024). Toward security quantification of serverless computing. Journal of Cloud Computing Advances Systems and Applications, 13(1). https://doi.org/10.1186/s13677-024-00703-y DOI
  8. Ouyang, R., Wang, J., Xu, H., Chen, S., Xiong, X., Tolba, A., & Zhang, X. (2023). A Microservice and Serverless Architecture for Secure IoT System. Sensors, 23(10), 4868. https://doi.org/10.3390/s23104868 DOI
  9. Pakdil, M. E., & Çelik, R. N. (2021). Serverless Geospatial Data Processing Workflow System Design. ISPRS International Journal of Geo-Information, 11(1), 20. https://doi.org/10.3390/ijgi11010020 DOI
  10. Ristov, S., Pedratscher, S., & Fahringer, T. (2020). AFCL: An Abstract Function Choreography Language for serverless workflow specification. Future Generation Computer Systems, 114, 368-382. https://doi.org/10.1016/j.future.2020.08.012 DOI
Publication details
Journal
Systems, Networks and Secure Computing
Volume
1 (2026)
Article number
snsc20260001
License
CC BY 4.0