publish-assistant/site/data/cloud-edge/papers/TCC-2025-digest.yaml

venue: TCC
year: 2025
selected:
  - title: "DRKC: Deep Reinforcement Learning Enhanced Microservice Scheduling on Kubernetes Clusters in Cloud-Edge Environment"
    authors:
    - Jian Jiang
    - Qianmu Li
    - Pengchuan Wang
    - Yunhuai Liu
    tldr: "DRKC uses deep reinforcement learning to schedule microservices across Kubernetes clusters spanning cloud and edge nodes, optimizing latency and resource utilization."
    why_notable: "One of the few papers to tackle DRL-based microservice placement at the Kubernetes level in a real cloud-edge topology, making it directly actionable for practitioners."

  - title: "DesFaaS: Cross-Layer Joint Dynamic Deployment System for Serverless Stateful Functions"
    authors:
    - Yuquan Jing
    - Binbin Feng
    - Zhijun Ding
    tldr: "DesFaaS jointly optimizes the placement and lifecycle of stateful serverless functions across compute, network, and storage layers to reduce latency and cost."
    why_notable: "Addresses the hard problem of state management in FaaS by co-designing across layers, opening a new direction for stateful serverless architectures."

  - title: "CARL: Cost-Optimized Online Container Placement on VMs Using Adversarial Reinforcement Learning"
    authors:
    - Prathamesh Saraf Vinayak
    - Saswat Subhajyoti Mallick
    - Lakshmi Jagarlamudi
    - Anirban Chakraborty 0001
    - Yogesh Simmhan
    tldr: "CARL applies adversarial reinforcement learning to online container bin-packing on cloud VMs, minimizing cost while handling adversarial workload patterns."
    why_notable: "The adversarial training objective makes the scheduler robust to worst-case workload shifts, a significant advance over standard RL-based placement."

  - title: "CADER: Cost-Efficient Cloud Application Deployment With Tenant Requirement Guarantee in Multi-Clouds"
    authors:
    - Huaqing Tu
    - Ziqiang Hua
    - Qianpiao Ma
    - Hanguang Luo
    - Tao Zou
    - Gongming Zhao
    - Hongli Xu 0001
    tldr: "CADER places cloud application components across multiple providers to minimize cost while enforcing per-tenant SLA and data-locality constraints."
    why_notable: "Provides a rigorous multi-cloud placement framework that balances cost and tenant requirements, directly addressing a key challenge in multi-cloud SaaS/PaaS deployments."

  - title: "Cloud Load Balancers Need to Stay Off the Data Path"
    authors:
    - Yuchen Zhang
    - Shuai Jin
    - Zhenyu Wen
    - Shibo He
    - Qingzheng Hou
    - Yang Song
    - Zhigang Zong
    - Xiaomin Wu
    - Bengbeng Xue
    - Chenghao Sun
    - Ku Li
    - Xing Li 0007
    - Biao Lyu
    - Rong Wen
    - Jiming Chen 0001
    - Shunmin Zhu
    tldr: "Based on large-scale production experience, this paper argues and demonstrates that cloud load balancers should operate out-of-band to eliminate throughput bottlenecks at scale."
    why_notable: "A rare production-grounded architectural insight from a major cloud provider that challenges conventional in-path load balancer designs."

  - title: "PHOENIX: Misconfiguration Detection for AWS Serverless Computing"
    authors:
    - Jinfeng Wen
    - Haodi Ping
    tldr: "PHOENIX automatically detects security and correctness misconfigurations in AWS Lambda deployments by analyzing IAM policies, triggers, and function configurations."
    why_notable: "Serverless misconfiguration is a leading cause of cloud security incidents; PHOENIX provides an automated, deployable detection tool for AWS environments."

  - title: "FaaSScout: Fast and Full Lifecycle RCA for FaaS Applications Using Salient Feature Mining"
    authors:
    - Min Li 0065
    - Jin Huang
    - Pengfei Chen 0002
    - Chongkang Tan
    tldr: "FaaSScout performs root cause analysis across the full FaaS invocation lifecycle by mining salient features from traces and logs to localize faults quickly."
    why_notable: "Fills a critical operational gap for serverless: fast, automated fault diagnosis that covers cold starts, platform issues, and application errors in a unified framework."

  - title: "Hybrid Serverless Platform for Smart Deployment of Service Function Chains"
    authors:
    - Sheshadri K. R
    - J. Lakshmi
    tldr: "A hybrid serverless platform that intelligently places NFV service function chains on serverless infrastructure, reducing provisioning overhead while meeting latency targets."
    why_notable: "Bridges serverless computing and NFV, demonstrating that serverless abstractions can be applied to network function deployment with competitive performance."

  - title: "PiCoP: Service Mesh for Sharing Microservices in Multiple Environments Using Protocol-Independent Context Propagation"
    authors:
    - Hiroya Onoe
    - Daisuke Kotani
    - Yasuo Okabe
    tldr: "PiCoP extends service mesh capabilities to span heterogeneous protocol environments by providing protocol-independent context propagation for distributed microservice tracing and control."
    why_notable: "Solves a practical multi-cloud and hybrid deployment challenge where microservices communicate over different protocols, enabling unified observability and policy enforcement."

  - title: "A Reference Architecture for Governance of Cloud Native Applications"
    authors:
    - William Pourmajidi
    - Lei Zhang 0078
    - John Steinbacher
    - Tony Erwin
    - Andriy V. Miranskyy
    tldr: "Proposes and validates a reference architecture that unifies policy enforcement, compliance, and lifecycle governance for cloud-native applications across deployment environments."
    why_notable: "Provides a vendor-neutral governance blueprint grounded in industry practice, filling a gap between DevOps tooling and organizational cloud compliance requirements."

  - title: "Observability and Incident Response in Managed Serverless Environments Using Ontology-Based Log Monitoring"
    authors:
    - Lavi Ben-Shimol
    - Edita Grolman
    - Aviad Elyashar
    - Inbar Maimon
    - Dudu Mimran
    - Oleg Brodt
    - Martin Strassmann
    - Heiko Lehmann
    - Yuval Elovici
    - Asaf Shabtai
    tldr: "Uses an ontology-based approach to monitor serverless function logs, enabling structured incident detection and response in managed FaaS environments."
    why_notable: "Brings structured knowledge representation to serverless observability, enabling richer incident correlation than rule-based or purely ML-based log monitors."

  - title: "A Run-Time Framework for Ensuring Zero-Trust State of Client's Machines in Cloud Environment"
    authors:
    - Devki Nandan Jha
    - Graham Lenton
    - James Asker
    - David Blundell
    - Martin Higgins
    - David C. H. Wallom
    tldr: "A runtime attestation framework continuously verifies the security posture of client machines accessing cloud resources, enforcing zero-trust policies based on live system state."
    why_notable: "Moves zero-trust enforcement from static policy configuration to continuous runtime verification, addressing a key gap in current cloud access control models."