Diggi: A Secure Framework for Hosting Native Cloud Functions with Minimal Trust

The emerging serverless cloud paradigm, also known as Function as a Service (FaaS), enables auto-scalable cloud services on-demand, but requires complete trust in the surrounding infrastructure. Workloads hosting sensitive data, such as medical records or financial transactions, may not be able to use such cloud services due to these trust assumptions. This paper introduces Diggi, a native secure FaaS runtime for scalable function deployment requiring minimal trust in the underlying hardware/software stack. We demonstrate that Diggi is practical and that it holds comparable performance to conventional FaaS software.