Distributed Information Flow Control in Serverless Computing

To secure a serverless system, an approach using Distributed Information Flow Control is proposed to be constructed. For a system to be secure at the programming level, it is imperative that confidentiality and integrity are enforced. While confidentiality is described as the virtue of a system to protect its sensitive data from being disclosed to unauthorized parties, whereas integrity can be explained as the ability of a system to prevent an information from being manipulated or modified by unauthorized parties. All the essential ideas are elaborated in this section as follows: 1.1 introduces Serverless Computing, whereas 1.2 talks about the information flow control model. Furthermore, 1.3 describes the phenomena of non-interference in security, and 1.4 describes two types of information flow control enforcements, Termination Insensitive Non-Interforence (TINI), and Termination Sensitive Non-Interforence (TSNI) where TSNI is described formally. Finally, 1.5 discusses the existing approaches that employ IFC to secure serverless systems.