Secure Serverless Workflows: Identity, Isolation, and Recoverable Execution

Authors

  • Travis Graham Author

Keywords:

serverless computing, workflow security, cloud isolation, identity, recovery

Abstract

This systems review examines secure execution of serverless workflows. The organizing question is how short-lived functions can preserve identity, isolation, state integrity, and recoverable semantics across services. Ten related scholarly sources are synthesized through a decision-centered framework spanning problem definition, mechanism, measurement, evaluation, implementation, and governance. The review does not invent experiments, pooled estimates, or unreported quantitative results. It instead evaluates the strength and transferability of the available evidence, with particular attention to equating ephemeral execution with a reduced attack surface. The resulting framework links technical or empirical performance to explicit use conditions and identifies tests that should precede wider adoption in event-driven cloud applications.

References

  1. Cinar, B. (2023). The Rise of Serverless Architectures: Security Challenges and Best Practices. Asian Journal of Research in Computer Science, 16(4), 194-210. https://doi.org/10.9734/ajrcos/2023/v16i4382
  2. Escaleira, P., Cunha, V. A., Barraca, J. P., Gomes, D., & Aguiar, R. L. (2025). A systematic review on security mechanisms for serverless computing. Cluster Computing, 28(7). https://doi.org/10.1007/s10586-025-05371-4
  3. John, A., Muenzen, K., & Ausmees, K. (2021). Evaluation of serverless computing for scalable execution of a joint variant calling workflow. PLoS ONE, 16(7), e0254363. https://doi.org/10.1371/journal.pone.0254363
  4. Liang, H., Zhang, S., Liu, X., Cheng, G., Ma, H., & Wang, Q. (2024). SMWE: A Framework for Secure and Makespan-Oriented Workflow Execution in Serverless Computing. Electronics, 13(16), 3246. https://doi.org/10.3390/electronics13163246
  5. Marin, E., Perino, D., & Pietro, R. D. (2022). Serverless computing: a security perspective. Journal of Cloud Computing Advances Systems and Applications, 11(1). https://doi.org/10.1186/s13677-022-00347-w
  6. Morabito, G., Sicari, C., Ruggeri, A., Celesti, A., & Carnevale, L. (2023). Secure-by-design serverless workflows on the Edge–Cloud Continuum through the Osmotic Computing paradigm. Internet of Things, 22, 100737. https://doi.org/10.1016/j.iot.2023.100737
  7. Ni, K., Mondal, S. K., Kabir, H. M. D., Tan, T., & Dai, H. N. (2024). Toward security quantification of serverless computing. Journal of Cloud Computing Advances Systems and Applications, 13(1). https://doi.org/10.1186/s13677-024-00703-y
  8. Ouyang, R., Wang, J., Xu, H., Chen, S., Xiong, X., Tolba, A., & Zhang, X. (2023). A Microservice and Serverless Architecture for Secure IoT System. Sensors, 23(10), 4868. https://doi.org/10.3390/s23104868
  9. Pakdil, M. E., & Çelik, R. N. (2021). Serverless Geospatial Data Processing Workflow System Design. ISPRS International Journal of Geo-Information, 11(1), 20. https://doi.org/10.3390/ijgi11010020
  10. Ristov, S., Pedratscher, S., & Fahringer, T. (2020). AFCL: An Abstract Function Choreography Language for serverless workflow specification. Future Generation Computer Systems, 114, 368-382. https://doi.org/10.1016/j.future.2020.08.012

Downloads

Published

2026-08-08

Issue

Vol. 1 (2026): Archive

Section

Systems Review

License

Copyright (c) 2026 Systems, Networks and Secure Computing

Creative Commons License

This work is licensed under a Creative Commons Attribution 4.0 International License.