venue: TCC year: 2025 selected: - title: "DRKC: Deep Reinforcement Learning Enhanced Microservice Scheduling on Kubernetes Clusters in Cloud-Edge Environment" authors: - Jian Jiang - Qianmu Li - Pengchuan Wang - Yunhuai Liu tldr: "DRKC uses deep reinforcement learning to schedule microservices across Kubernetes clusters spanning cloud and edge nodes, optimizing latency and resource utilization." why_notable: "One of the few papers to tackle DRL-based microservice placement at the Kubernetes level in a real cloud-edge topology, making it directly actionable for practitioners." - title: "DesFaaS: Cross-Layer Joint Dynamic Deployment System for Serverless Stateful Functions" authors: - Yuquan Jing - Binbin Feng - Zhijun Ding tldr: "DesFaaS jointly optimizes the placement and lifecycle of stateful serverless functions across compute, network, and storage layers to reduce latency and cost." why_notable: "Addresses the hard problem of state management in FaaS by co-designing across layers, opening a new direction for stateful serverless architectures." - title: "CARL: Cost-Optimized Online Container Placement on VMs Using Adversarial Reinforcement Learning" authors: - Prathamesh Saraf Vinayak - Saswat Subhajyoti Mallick - Lakshmi Jagarlamudi - Anirban Chakraborty 0001 - Yogesh Simmhan tldr: "CARL applies adversarial reinforcement learning to online container bin-packing on cloud VMs, minimizing cost while handling adversarial workload patterns." why_notable: "The adversarial training objective makes the scheduler robust to worst-case workload shifts, a significant advance over standard RL-based placement." - title: "CADER: Cost-Efficient Cloud Application Deployment With Tenant Requirement Guarantee in Multi-Clouds" authors: - Huaqing Tu - Ziqiang Hua - Qianpiao Ma - Hanguang Luo - Tao Zou - Gongming Zhao - Hongli Xu 0001 tldr: "CADER places cloud application components across multiple providers to minimize cost while enforcing per-tenant SLA and data-locality constraints." why_notable: "Provides a rigorous multi-cloud placement framework that balances cost and tenant requirements, directly addressing a key challenge in multi-cloud SaaS/PaaS deployments." - title: "Cloud Load Balancers Need to Stay Off the Data Path" authors: - Yuchen Zhang - Shuai Jin - Zhenyu Wen - Shibo He - Qingzheng Hou - Yang Song - Zhigang Zong - Xiaomin Wu - Bengbeng Xue - Chenghao Sun - Ku Li - Xing Li 0007 - Biao Lyu - Rong Wen - Jiming Chen 0001 - Shunmin Zhu tldr: "Based on large-scale production experience, this paper argues and demonstrates that cloud load balancers should operate out-of-band to eliminate throughput bottlenecks at scale." why_notable: "A rare production-grounded architectural insight from a major cloud provider that challenges conventional in-path load balancer designs." - title: "PHOENIX: Misconfiguration Detection for AWS Serverless Computing" authors: - Jinfeng Wen - Haodi Ping tldr: "PHOENIX automatically detects security and correctness misconfigurations in AWS Lambda deployments by analyzing IAM policies, triggers, and function configurations." why_notable: "Serverless misconfiguration is a leading cause of cloud security incidents; PHOENIX provides an automated, deployable detection tool for AWS environments." - title: "FaaSScout: Fast and Full Lifecycle RCA for FaaS Applications Using Salient Feature Mining" authors: - Min Li 0065 - Jin Huang - Pengfei Chen 0002 - Chongkang Tan tldr: "FaaSScout performs root cause analysis across the full FaaS invocation lifecycle by mining salient features from traces and logs to localize faults quickly." why_notable: "Fills a critical operational gap for serverless: fast, automated fault diagnosis that covers cold starts, platform issues, and application errors in a unified framework." - title: "Hybrid Serverless Platform for Smart Deployment of Service Function Chains" authors: - Sheshadri K. R - J. Lakshmi tldr: "A hybrid serverless platform that intelligently places NFV service function chains on serverless infrastructure, reducing provisioning overhead while meeting latency targets." why_notable: "Bridges serverless computing and NFV, demonstrating that serverless abstractions can be applied to network function deployment with competitive performance." - title: "PiCoP: Service Mesh for Sharing Microservices in Multiple Environments Using Protocol-Independent Context Propagation" authors: - Hiroya Onoe - Daisuke Kotani - Yasuo Okabe tldr: "PiCoP extends service mesh capabilities to span heterogeneous protocol environments by providing protocol-independent context propagation for distributed microservice tracing and control." why_notable: "Solves a practical multi-cloud and hybrid deployment challenge where microservices communicate over different protocols, enabling unified observability and policy enforcement." - title: "A Reference Architecture for Governance of Cloud Native Applications" authors: - William Pourmajidi - Lei Zhang 0078 - John Steinbacher - Tony Erwin - Andriy V. Miranskyy tldr: "Proposes and validates a reference architecture that unifies policy enforcement, compliance, and lifecycle governance for cloud-native applications across deployment environments." why_notable: "Provides a vendor-neutral governance blueprint grounded in industry practice, filling a gap between DevOps tooling and organizational cloud compliance requirements." - title: "Observability and Incident Response in Managed Serverless Environments Using Ontology-Based Log Monitoring" authors: - Lavi Ben-Shimol - Edita Grolman - Aviad Elyashar - Inbar Maimon - Dudu Mimran - Oleg Brodt - Martin Strassmann - Heiko Lehmann - Yuval Elovici - Asaf Shabtai tldr: "Uses an ontology-based approach to monitor serverless function logs, enabling structured incident detection and response in managed FaaS environments." why_notable: "Brings structured knowledge representation to serverless observability, enabling richer incident correlation than rule-based or purely ML-based log monitors." - title: "A Run-Time Framework for Ensuring Zero-Trust State of Client's Machines in Cloud Environment" authors: - Devki Nandan Jha - Graham Lenton - James Asker - David Blundell - Martin Higgins - David C. H. Wallom tldr: "A runtime attestation framework continuously verifies the security posture of client machines accessing cloud resources, enforcing zero-trust policies based on live system state." why_notable: "Moves zero-trust enforcement from static policy configuration to continuous runtime verification, addressing a key gap in current cloud access control models."