{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,14]],"date-time":"2026-01-14T18:53:43Z","timestamp":1768416823614,"version":"3.49.0"},"reference-count":81,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2021,3,9]],"date-time":"2021-03-09T00:00:00Z","timestamp":1615248000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2021,3,9]],"date-time":"2021-03-09T00:00:00Z","timestamp":1615248000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100007514","name":"Universit\u00e0 di Pisa","doi-asserted-by":"publisher","award":["PRA_2018_66"],"award-info":[{"award-number":["PRA_2018_66"]}],"id":[{"id":"10.13039\/501100007514","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Dept. of Computer Science, University of Pisa","award":["GIO: a Fog computing testbed for research & education"],"award-info":[{"award-number":["GIO: a Fog computing testbed for research & education"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Computing"],"published-print":{"date-parts":[[2021,5]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Function-as-a-Service (FaaS) allows developers to define, orchestrate and run modular event-based pieces of code on virtualised resources, without the burden of managing the underlying infrastructure nor the life-cycle of such pieces of code. Indeed, FaaS providers offer resource auto-provisioning, auto-scaling and pay-per-use billing at no costs for idle time. This makes it easy to scale running code and it represents an effective and increasingly adopted way to deliver software. This article aims at offering an overview of the existing literature in the field of next-gen FaaS from three different perspectives: (i) the <jats:italic>definition<\/jats:italic> of FaaS orchestrations, (ii) the <jats:italic>execution<\/jats:italic> of FaaS orchestrations in Fog computing environments, and (iii) the <jats:italic>security<\/jats:italic> of FaaS orchestrations. Our analysis identify trends and gaps in the literature, paving the way to further research on securing FaaS orchestrations in Fog computing landscapes.<\/jats:p>","DOI":"10.1007\/s00607-021-00924-y","type":"journal-article","created":{"date-parts":[[2021,3,9]],"date-time":"2021-03-09T19:03:18Z","timestamp":1615316598000},"page":"1025-1056","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["Secure FaaS orchestration in the fog: how far are we?"],"prefix":"10.1007","volume":"103","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7000-2103","authenticated-orcid":false,"given":"Alessandro","family":"Bocci","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4159-8761","authenticated-orcid":false,"given":"Stefano","family":"Forti","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3548-5514","authenticated-orcid":false,"given":"Gian-Luigi","family":"Ferrari","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2048-2468","authenticated-orcid":false,"given":"Antonio","family":"Brogi","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2021,3,9]]},"reference":[{"key":"924_CR1","volume-title":"Research advances in cloud computing","author":"I Baldini","year":"2017","unstructured":"Baldini I, Castro PC, Chang KS, Cheng P, Fink S, Ishakian V, Mitchell N, Muthusamy V, Rabbah R, Slominski A, Suter P (2017) Serverless computing: current trends and open problems. In: Chaudhary S, Somani G, Buyya R (eds) Research advances in cloud computing. Springer, Berlin"},{"key":"924_CR2","unstructured":"Jonas E, Schleier-Smith J, Sreekanti V, Tsai C, Khandelwal A, Pu Q, Shankar V, Carreira J, Krauth K, Yadwadkar NJ, Gonzalez JE, Popa RA, Stoica I, Patterson DA (2019) Cloud programming simplified: A berkeley view on serverless computing. CoRR"},{"key":"924_CR3","first-page":"8","volume":"22","author":"EV Eyk","year":"2018","unstructured":"Eyk EV, Toader L, Talluri S, Versluis L, Uta A, Iosup A (2018) Serverless is more: from paas to present cloud computing. IEEE Internet Comput 22:8\u201317","journal-title":"IEEE Internet Comput"},{"key":"924_CR4","unstructured":"AWS Lambda Releases. https:\/\/docs.aws.amazon.com\/lambda\/latest\/dg\/lambda-releases.html. Accessed Jan 2021"},{"key":"924_CR5","volume-title":"Big data and internet of things: A roadmap for smart environments","author":"F Bonomi","year":"2014","unstructured":"Bonomi F, Milito R, Natarajan P, Zhu J (2014) Fog computing: a platform for internet of things and analytics. In: Bessis N, Dobre C (eds) Big data and internet of things: A roadmap for smart environments. Springer, Berlin"},{"key":"924_CR6","doi-asserted-by":"publisher","first-page":"69105","DOI":"10.1109\/ACCESS.2020.2983253","volume":"8","author":"P Habibi","year":"2020","unstructured":"Habibi P, Farhoudi M, Kazemian S, Khorsandi S, Leon-Garcia A (2020) Fog computing: a comprehensive architectural survey. IEEE Access 8:69105\u201369133","journal-title":"IEEE Access"},{"key":"924_CR7","doi-asserted-by":"publisher","first-page":"190","DOI":"10.1016\/j.jpdc.2018.03.004","volume":"132","author":"R Mahmud","year":"2019","unstructured":"Mahmud R, Srirama SN, Ramamohanarao K, Buyya R (2019) Quality of experience (QoE)-aware placement of applications in fog computing environments. J. Parallel Distributed Comput 132:190\u2013203","journal-title":"J. Parallel Distributed Comput"},{"key":"924_CR8","doi-asserted-by":"publisher","first-page":"131","DOI":"10.1016\/j.future.2019.02.056","volume":"97","author":"C Guerrero","year":"2019","unstructured":"Guerrero C, Lera I, Juiz C (2019) Evaluation and efficiency comparison of evolutionary algorithms for service placement optimization in fog architectures. Future Gener Comput Syst 97:131\u2013144","journal-title":"Future Gener Comput Syst"},{"key":"924_CR9","doi-asserted-by":"crossref","unstructured":"Brogi A, Forti S, Ibrahim A (2018) Optimising QoS-assurance, resource usage and cost of fog application deployments. In: CLOSER (Selected Papers)","DOI":"10.1007\/978-3-030-29193-8_9"},{"key":"924_CR10","doi-asserted-by":"crossref","unstructured":"Gro\u00dfmann M, Ioannidis C, Le DT (2019) Applicability of serverless computing in fog computing environments for iot scenarios. In: UCC companion, association for computing machinery","DOI":"10.1145\/3368235.3368834"},{"key":"924_CR11","doi-asserted-by":"crossref","unstructured":"Raghavendra MS, Chawla P (2018) A review on container-based lightweight virtualization for fog computing. In: ICRITO","DOI":"10.1109\/ICRITO.2018.8748346"},{"key":"924_CR12","doi-asserted-by":"crossref","unstructured":"von Leon D, Miori L, Sanin J, El Ioini N, Helmer S, Pahl C (2019) A lightweight container middleware for edge cloud architectures. Fog and edge computing","DOI":"10.1002\/9781119525080.ch7"},{"key":"924_CR13","doi-asserted-by":"crossref","unstructured":"Pfandzelter T, Bermbach D (2020) tinyfaas: A lightweight faas platform for edge environments. In: ICFC","DOI":"10.1109\/ICFC49376.2020.00011"},{"key":"924_CR14","doi-asserted-by":"publisher","first-page":"775","DOI":"10.1016\/j.future.2019.08.020","volume":"102","author":"S Forti","year":"2020","unstructured":"Forti S, Ferrari G-L, Brogi A (2020) Secure cloud-edge deployments, with trust. Future Gener Comput Syst 102:775\u2013788","journal-title":"Future Gener Comput Syst"},{"key":"924_CR15","doi-asserted-by":"publisher","first-page":"601","DOI":"10.1109\/COMST.2017.2762345","volume":"20","author":"J Ni","year":"2017","unstructured":"Ni J, Zhang K, Lin X, Shen X (2017) Securing fog computing for internet of things applications: challenges and solutions. IEEE Commun Surv Tutor 20:601\u2013628","journal-title":"IEEE Commun Surv Tutor"},{"key":"924_CR16","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1016\/j.future.2018.07.039","volume":"90","author":"LM Vaquero","year":"2019","unstructured":"Vaquero LM, Cuadrado F, Elkhatib Y, Bernal-Bernabe J, Srirama SN, Zhani MF (2019) Research challenges in nextgen service orchestration. Future Gener Comput Syst 90:20\u201338","journal-title":"Future Gener Comput Syst"},{"key":"924_CR17","doi-asserted-by":"publisher","first-page":"110708","DOI":"10.1016\/j.jss.2020.110708","volume":"170","author":"J Scheuner","year":"2020","unstructured":"Scheuner J, Leitner P (2020) Function-as-a-service performance evaluation: A multivocal literature review. J Syst Softw 170:110708","journal-title":"J Syst Softw"},{"key":"924_CR18","unstructured":"L\u00f3pez PG, Artigas MS, Par\u00eds G, Pons DB, Ollobarren \u00c1R, Pinto DA (2018) Comparison of faas orchestration systems. In: UCC Companion"},{"key":"924_CR19","unstructured":"Wang L, Li M, Zhang Y, Ristenpart T, Swift M (2018) Peeking behind the curtains of serverless platforms. In: USENIX ATC"},{"key":"924_CR20","doi-asserted-by":"crossref","unstructured":"Yussupov V, Soldani J, Breitenb\u00fccher U, Brogi A, Leymann F (2020) Faasten your decisions: Classification framework and technology review of function-as-a-service platforms. CoRR","DOI":"10.1016\/j.jss.2021.110906"},{"key":"924_CR21","unstructured":"AWS Step Functions. https:\/\/docs.aws.amazon.com\/step-functions\/index.html. Accessed Jan 2021"},{"key":"924_CR22","unstructured":"AWS IoT Greengrass. https:\/\/aws.amazon.com\/it\/greengrass\/. Accessed Jan 2021"},{"key":"924_CR23","unstructured":"Microsoft Azure Functions. https:\/\/azure.microsoft.com\/services\/functions\/. Accessed Jan 2021"},{"key":"924_CR24","unstructured":"Azure Durable Functions. https:\/\/docs.microsoft.com\/en-us\/azure\/azure-functions\/durable\/. Accessed Jan 2021"},{"key":"924_CR25","unstructured":"Azure IoT Edge. https:\/\/azure.microsoft.com\/en-us\/services\/iot-edge\/. Accessed Jan 2021"},{"key":"924_CR26","unstructured":"Google Cloud Functions. https:\/\/cloud.google.com\/functions. Accessed Jan 2021"},{"key":"924_CR27","unstructured":"Apache OpenWhisk. https:\/\/openwhisk.apache.org\/. Accessed Jan 2021"},{"key":"924_CR28","unstructured":"IBM Cloud Functions. https:\/\/cloud.ibm.com\/functions\/. Accessed Jan 2021"},{"key":"924_CR29","unstructured":"IBM Composer. https:\/\/cloud.ibm.com\/docs\/openwhisk?topic=openwhisk-pkg_composer. Accessed Jan 2021"},{"key":"924_CR30","unstructured":"Fission. https:\/\/fission.io\/. Accessed Jan 2021"},{"key":"924_CR31","unstructured":"Kubeless. https:\/\/kubeless.io\/"},{"key":"924_CR32","unstructured":"Knative. https:\/\/knative.dev\/. Accessed Jan 2021"},{"key":"924_CR33","unstructured":"OpenFaaS. https:\/\/www.openfaas.com\/. Accessed Jan 2021"},{"key":"924_CR34","unstructured":"Nuclio. https:\/\/nuclio.io\/. Accessed Jan 2021"},{"key":"924_CR35","doi-asserted-by":"crossref","unstructured":"Baldini I, Cheng P, Fink SJ, Mitchell N, Muthusamy V, Rabbah R, Suter P, Tardieu O (2017) The serverless trilemma: function composition for serverless computing. In: Onward!","DOI":"10.1145\/3133850.3133855"},{"key":"924_CR36","doi-asserted-by":"crossref","unstructured":"Jangda A, Pinckney D, Brun Y, Guha A (2019) Formal foundations of serverless computing. In: Proceedings of the ACM on programming languages, 3(OOPSLA)","DOI":"10.1145\/3360575"},{"key":"924_CR37","doi-asserted-by":"crossref","unstructured":"Gabbrielli M, Giallorenzo S, Lanese I, Montesi F, Peressotti M, Zingaro SP (2019) No more, no less\u2014a formal model for serverless computing. In: COORDINATION","DOI":"10.1007\/978-3-030-22397-7_9"},{"key":"924_CR38","doi-asserted-by":"crossref","unstructured":"L\u00f3pez PG, Arjona A, Samp\u00e9 J, Slominski A, Villard L (2020) Triggerflow: trigger-based orchestration of serverless workflows. In: DEBS","DOI":"10.1145\/3401025.3401731"},{"key":"924_CR39","doi-asserted-by":"crossref","unstructured":"Eismann S, Grohmann J, Eyk EV, Herbst N, Kounev S (2020) Predicting the costs of serverless workflows. In: ICPE","DOI":"10.1145\/3358960.3379133"},{"key":"924_CR40","unstructured":"Yang Q, Jin R, Gandhi N, Ge X, Khouzani HA, Zhao M (2020) Edgebench: a workflow-based benchmark for edge computing. CoRR"},{"key":"924_CR41","unstructured":"Gerasimov N (2019) The DSL for composing functions for FaaS platform. In: SEIM-2019, p 13"},{"key":"924_CR42","doi-asserted-by":"crossref","unstructured":"Persson P, Angelsmark O (2017) Kappa: serverless iot deployment. In: WOSC@Middleware","DOI":"10.1145\/3154847.3154853"},{"key":"924_CR43","unstructured":"Moritz P, Nishihara R, Wang S, Tumanov A, Liaw R, Liang E, Elibol M, Yang Z, Paul W, Jordan MI, Stoica I (2018) Ray: a distributed framework for emerging AI applications. In: OSDI"},{"key":"924_CR44","doi-asserted-by":"publisher","first-page":"692","DOI":"10.1007\/s10766-020-00663-1","volume":"40","author":"L Rinaldi","year":"2020","unstructured":"Rinaldi L, Torquati M, De Sensi D, Mencagli G, Danelutto M (2020) Improving the performance of actors on multi-cores with parallel patterns. Int J Parallel Program 40:692\u2013712","journal-title":"Int J Parallel Program"},{"key":"924_CR45","doi-asserted-by":"crossref","unstructured":"Gadepalli PK, Peach G, Cherkasova L, Aitken R, Parmer G (2019) Challenges and opportunities for efficient serverless computing at the edge. In: SRDS","DOI":"10.1109\/SRDS47363.2019.00036"},{"key":"924_CR46","doi-asserted-by":"crossref","unstructured":"Hall A, Ramachandran U (2019) An execution model for serverless functions at the edge. In: IoTDI","DOI":"10.1145\/3302505.3310084"},{"key":"924_CR47","doi-asserted-by":"crossref","unstructured":"Cheng B, F\u00fcrst J, Solmaz G, Sanada T (2019) Fog function: Serverless fog computing for data intensive iot services. In: SCC","DOI":"10.1109\/SCC.2019.00018"},{"key":"924_CR48","doi-asserted-by":"crossref","unstructured":"Baresi L, Mendon\u00e7a DF (2019) Towards a serverless platform for edge computing. In: ICFC","DOI":"10.1109\/ICFC.2019.00008"},{"key":"924_CR49","doi-asserted-by":"crossref","unstructured":"Baresi L, Mendon\u00e7a DF, Quattrocchi G (2019) PAPS: A framework for decentralized self-management at the edge. In: ICSOC","DOI":"10.1007\/978-3-030-33702-5_39"},{"key":"924_CR50","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1109\/MCOM.001.1900498","volume":"58","author":"C Cicconetti","year":"2020","unstructured":"Cicconetti C, Conti M, Passarella A, Sabella D (2020) Toward distributed computing environments with serverless solutions in edge systems. IEEE Commun Mag 58:40\u201346","journal-title":"IEEE Commun Mag"},{"key":"924_CR51","doi-asserted-by":"crossref","unstructured":"Mortazavi SH, Salehe M, Gomes CS, Phillips C, de Lara E (2017) Cloudpath: a multi-tier cloud computing framework. In: SEC","DOI":"10.1145\/3132211.3134464"},{"key":"924_CR52","doi-asserted-by":"crossref","unstructured":"Montresor A, Jelasity M (2009) Peersim: A scalable p2p simulator. In P2P, pp 99\u2013100","DOI":"10.1109\/P2P.2009.5284506"},{"key":"924_CR53","doi-asserted-by":"crossref","unstructured":"Angelsmark O, Persson P (2016) Requirement-based deployment of applications in calvin. In: InterOSS@IoT","DOI":"10.1007\/978-3-319-56877-5_5"},{"key":"924_CR54","doi-asserted-by":"crossref","unstructured":"Pinto D, Dias JP, Ferreira HS (2018) Dynamic allocation of serverless functions in IoT environments. In: EUC","DOI":"10.1109\/EUC.2018.00008"},{"key":"924_CR55","doi-asserted-by":"crossref","unstructured":"Das A, Imai S, Wittie MP, Patterson S (2020) Performance optimization for edge-cloud serverless platforms via dynamic task placement. In: CoRR","DOI":"10.1109\/CCGrid49817.2020.00-89"},{"key":"924_CR56","doi-asserted-by":"crossref","unstructured":"Aske A, Zhao X (2018) Supporting multi-provider serverless computing on the edge. In: ICPP","DOI":"10.1145\/3229710.3229742"},{"key":"924_CR57","doi-asserted-by":"crossref","unstructured":"Cho C, Shin S, Jeon H, Yoon S (2020) Qos-aware workload distribution in hierarchical edge clouds: A reinforcement learning approach. IEEE Access","DOI":"10.1109\/ACCESS.2020.3033421"},{"key":"924_CR58","doi-asserted-by":"crossref","unstructured":"Cicconetti C, Conti M, Passarella A (2020) A decentralized framework for serverless edge computing in the internet of things. IEEE Trans Netw Serv Manag","DOI":"10.1109\/TNSM.2020.3023305"},{"key":"924_CR59","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1016\/j.future.2020.07.017","volume":"114","author":"T Rausch","year":"2021","unstructured":"Rausch T, Rashed A, Dustdar S (2021) Optimized container scheduling for data-intensive serverless edge computing. Future Gener Comput Syst 114:259\u2013271","journal-title":"Future Gener Comput Syst"},{"key":"924_CR60","unstructured":"Stojcev MK (2005) Alberto leon-garcia, indra widjaja, communication networks: fundamental concepts and key architectures, second edition, Mcgraw Hill Higher Education, Boston, 2004, ISBN 0-07-119848-2. hardcover, pp 900, plus XXVII. Microelectron. Reliab"},{"key":"924_CR61","doi-asserted-by":"publisher","first-page":"2146","DOI":"10.1109\/JIOT.2018.2826006","volume":"5","author":"Q Fan","year":"2018","unstructured":"Fan Q, Ansari N (2018) Application aware workload allocation for edge computing-based IoT. IEEE Internet Things J 5:2146\u20132153","journal-title":"IEEE Internet Things J"},{"key":"924_CR62","unstructured":"Rausch T, Hummer W, Muthusamy V, Rashed A, Dustdar S (2019) Towards a serverless platform for edge AI. In: HotEdge"},{"key":"924_CR63","doi-asserted-by":"crossref","unstructured":"Bermbach D, Maghsudi S, Hasenburg J, Pfandzelter T (2020) Towards auction-based function placement in serverless fog platforms. In: ICFC","DOI":"10.1109\/ICFC49376.2020.00012"},{"key":"924_CR64","doi-asserted-by":"publisher","first-page":"605","DOI":"10.1016\/j.future.2020.08.011","volume":"114","author":"S Forti","year":"2021","unstructured":"Forti S, Gaglianese M, Brogi A (2021) Lightweight self-organising distributed monitoring of Fog infrastructures. Future Gener Comput Syst 114:605\u2013618","journal-title":"Future Gener Comput Syst"},{"key":"924_CR65","doi-asserted-by":"crossref","unstructured":"Buzachis A, Fazio M, Celesti A, Villari M (2019) Osmotic flow deployment leveraging faas capabilities. In: IDCS","DOI":"10.1007\/978-3-030-34914-1_37"},{"key":"924_CR66","doi-asserted-by":"crossref","unstructured":"Trach B, Oleksenko O, Gregor F, Bhatotia P, Fetzer C (2019) Clemmys: towards secure remote execution in FaaS. In: SYSTOR","DOI":"10.1145\/3319647.3325835"},{"key":"924_CR67","doi-asserted-by":"crossref","unstructured":"Alder F, Asokan N, Kurnikov A, Paverd A, Steiner M (2019) S-faas: Trustworthy and accountable function-as-a-service using intel SGX. In: CCSW@CCS. ACM, pp 185\u2013199","DOI":"10.1145\/3338466.3358916"},{"key":"924_CR68","doi-asserted-by":"crossref","unstructured":"Brenner S, Kapitza R (2019) Trust more, serverless. In: Hershcovitch M, Goel A, Morrison A, (eds) SYSTOR","DOI":"10.1145\/3319647.3325825"},{"key":"924_CR69","doi-asserted-by":"crossref","unstructured":"Gjerdrum AT, Johansen HD, Brenna L, Johansen D (2019) Diggi: A secure framework for hosting native cloud functions with minimal trust. In: (TPS-ISA), pp 18\u201327","DOI":"10.1109\/TPS-ISA48467.2019.00012"},{"key":"924_CR70","doi-asserted-by":"crossref","unstructured":"Qiang W, Dong Z, Jin H (2018) Se-lambda: Securing privacy-sensitive serverless applications using SGX enclave. In: SecureComm 2018, Part I","DOI":"10.1007\/978-3-030-01701-9_25"},{"key":"924_CR71","doi-asserted-by":"crossref","unstructured":"Alpernas K, Flanagan C, Fouladi S, Ryzhyk L, Sagiv M, Schmitz T, Winstein K (2018) Secure serverless computing using dynamic information flow control. ACM Program. Lang., no. OOPSLA, Proc","DOI":"10.1145\/3276488"},{"key":"924_CR72","doi-asserted-by":"crossref","unstructured":"Datta P, Kumar P, Morris T, Grace M, Rahmati A, Bates A (2020) Valve: securing function workflows on serverless computing platforms. In: WWW \u201920","DOI":"10.1145\/3366423.3380173"},{"key":"924_CR73","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/JSAC.2002.806121","volume":"21","author":"A Sabelfeld","year":"2003","unstructured":"Sabelfeld A, Myers AC (2003) Language-based information-flow security. IEEE J Sel Areas Commun 21:5\u201319","journal-title":"IEEE J Sel Areas Commun"},{"key":"924_CR74","unstructured":"Boucher S, Kalia A, Andersen DG, Kaminsky M (2018) Putting the \u201cmicro\u201d back in microservice. In: USENIX ATC"},{"key":"924_CR75","doi-asserted-by":"crossref","unstructured":"Gadepalli PK, McBride S, Peach G, Cherkasova L, Parmer G (2020) Sledge: a serverless-first, light-weight wasm runtime for the edge. In: Middleware","DOI":"10.1145\/3423211.3425680"},{"key":"924_CR76","doi-asserted-by":"publisher","first-page":"719","DOI":"10.1002\/spe.2766","volume":"50","author":"A Brogi","year":"2020","unstructured":"Brogi A, Forti S, Guerrero C, Lera I (2020) How to place your apps in the fog: state of the art and open challenges. Softw Pract Exp 50:719\u2013740","journal-title":"Softw Pract Exp"},{"key":"924_CR77","doi-asserted-by":"publisher","first-page":"243","DOI":"10.1016\/j.future.2020.03.064","volume":"110","author":"Z\u00c1 Mann","year":"2020","unstructured":"Mann Z\u00c1 (2020) Secure software placement and configuration. Future Gener Comput Syst 110:243\u2013253","journal-title":"Future Gener Comput Syst"},{"key":"924_CR78","doi-asserted-by":"crossref","unstructured":"Hedin D, Birgisson A, Bello L, Sabelfeld A (2014) Jsflow: tracking information flow in javascript and its APIs. In: SAC","DOI":"10.1145\/2554850.2554909"},{"key":"924_CR79","doi-asserted-by":"crossref","unstructured":"Y. Huang, F. Yu, C. Hang, C. Tsai, D. Lee, and S. Kuo, Securing web application code by static analysis and runtime protection. In: WWW, 2004","DOI":"10.1145\/988672.988679"},{"key":"924_CR80","doi-asserted-by":"crossref","unstructured":"Hedin D, Sabelfeld A (2015) Web application security using JSFlow. In: SYNASC","DOI":"10.1109\/SYNASC.2015.11"},{"key":"924_CR81","doi-asserted-by":"crossref","unstructured":"Guarnieri M, Balliu M, Schoepe D, Basin DA, Sabelfeld A (2019) Information-flow control for database-backed applications. In: EuroS&P","DOI":"10.1109\/EuroSP.2019.00016"}],"container-title":["Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-021-00924-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00607-021-00924-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-021-00924-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T20:14:45Z","timestamp":1620159285000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00607-021-00924-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,3,9]]},"references-count":81,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2021,5]]}},"alternative-id":["924"],"URL":"https:\/\/doi.org\/10.1007\/s00607-021-00924-y","relation":{},"ISSN":["0010-485X","1436-5057"],"issn-type":[{"value":"0010-485X","type":"print"},{"value":"1436-5057","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,3,9]]},"assertion":[{"value":"4 November 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 February 2021","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"9 March 2021","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}