分析了服务器无服务器环境下机器学习的五大安全威胁，并提出有效防护框架。
Serverless AI Security: Attack Surface Analysis and Runtime Protection Mechanisms for FaaS-Based Machine Learning
- 从函数、模型、基础设施等五方面系统梳理安全漏洞
- 实测发现攻击成功率超94%，延迟增加不足9%
- 适合云原生AI开发者和安全工程师参考
无服务器计算已广泛采用，超过70%的AWS组织使用无服务器方案。与此同时，机器学习推理任务正越来越多迁移到函数即服务（FaaS）平台，以利用其可扩展性和成本效益。然而，这种融合带来了严峻的安全挑战，近期报告显示人工智能/机器学习漏洞增加了220%，且无服务器架构的碎片化特性引出了与传统云部署不同的新安全问题。本文首次对无服务器环境中的机器学习工作负载进行全面安全分析，系统地刻画了五个类别的攻击面：函数级漏洞（冷启动劫持、依赖项污染）、模型特有威胁（基于API的模型提取、对抗输入）、基础设施攻击（跨函数污染、权限提升）、供应链风险（恶意层、后门库）以及身份与访问管理复杂性（临时性、无服务器函数）。通过在AWS Lambda、Azure Functions和Google Cloud Functions上的实证评估，我们演示了真实世界攻击场景并量化其安全影响。提出Serverless AI Shield（SAS）多层防御框架，提供预部署验证、运行时监控和事后取证。评估表明，SAS实现94%检测率，推理延迟性能开销低于9%。我们开源了安全工具包，助力实践者评估和加固其无服务器AI部署，推动云原生机器学习系统向更高韧性演进。
原文摘要 · Abstract (English)
Serverless computing has achieved widespread adoption, with over 70% of AWS organizations using serverless solutions [1]. Meanwhile, machine learning inference workloads increasingly migrate to Function-as-a-Service (FaaS) platforms for their scalability and cost-efficiency [2], [3], [4]. However, this convergence introduces critical security challenges, with recent reports showing a 220% increase in AI/ML vulnerabilities [5] and serverless computing's fragmented architecture raises new security concerns distinct from traditional cloud deployments [6], [7]. This paper presents the first comprehensive security analysis of machine learning workloads in serverless environments. We systematically characterize the attack surface across five categories: function-level vulnerabilities (cold start exploitation, dependency poisoning), model-specific threats (API-based extraction, adversarial inputs), infrastructure attacks (cross-function contamination, privilege escalation), supply chain risks (malicious layers, backdoored libraries), and IAM complexity (ephemeral nature, serverless functions). Through empirical assessments across AWS Lambda, Azure Functions, and Google Cloud Functions, we demonstrate real-world attack scenarios and quantify their security impact. We propose Serverless AI Shield (SAS), a multi-layered defense framework providing pre-deployment validation, runtime monitoring, and post-execution forensics. Our evaluation shows SAS achieves 94% detection rates while maintaining performance overhead below 9% for inference latency. We release an open-source security toolkit to enable practitioners to assess and harden their serverless AI deployments, advancing the field toward more resilient cloud-native machine learning systems.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。