AN INTEGRATED APPROACH TO EVALUATING PAAS AND FAAS ARCHITECTURES IN HIGH-LOAD SYSTEMS

Authors

DOI:

https://doi.org/10.28925/2663-4023.2026.33.1233

Keywords:

Cloud Computing, Serverless, FaaS, monolithic architecture, AWS Lambda, microservices, STRIDE, FinOps, load testing

Abstract

This article presents a comprehensive study of architectural patterns for building high-load web systems in a cloud environment. A comparative analysis of the classic monolithic architecture (PaaS) and serverless architecture (FaaS) is conducted based on performance, cost efficiency, and information security criteria. Two functional prototypes of an order processing system were developed and tested using Amazon Web Services (AWS). It was experimentally established that a serverless architecture allows for a reduction in operating costs by 75–99% for systems with uneven traffic, but it introduces an additional "cold start" delay of up to 1.42 seconds. A decision-making matrix is proposed for choosing a technology stack depending on business requirements and the threat profile.

Downloads

Download data is not yet available.

References

Sbarski, P., Cui, Y., & Nair, A. (2022). Serverless architectures on AWS (2nd ed.). Manning Publications.

Storment, J. R., & Fuller, M. (2023). Cloud FinOps: Collaborative, real-time cloud financial management (2nd ed.). O’Reilly Media.

Ford, N., Richards, M., Sadalage, P., & Dehghani, Z. (2022). Software architecture: The hard parts. O’Reilly Media.

Amazon Web Services. (2022). Serverless applications lens – AWS Well-Architected Framework. https://docs.aws.amazon.com/wellarchitected/latest/serverless-applications-lens/

Golec, M., Walia, G. K., Kumar, M., Cuadrado, F., Gill, S. S., & Uhlig, S. (2024). Cold start latency in serverless computing: A systematic review, taxonomy, and future directions. ACM Computing Surveys, 57(3), Article 65, 1–36. https://doi.org/10.1145/3700875

Scheuner, J., & Leitner, P. (2020). Function-as-a-service performance evaluation: A multivocal literature review. Journal of Systems and Software, 170, 110708. https://doi.org/10.1016/j.jss.2020.110708

Fuerst, A., & Sharma, P. (2021). FaasCache: Keeping serverless computing alive with greedy-dual caching. In Proceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS ’21). https://doi.org/10.1145/3410276

Shafiei, H., Khonsari, A., & Mousavi, P. (2022). Serverless computing: A survey of opportunities, challenges, and applications. ACM Computing Surveys, 54(11s), Article 239, 1–32. https://doi.org/10.1145/3510611

Kratzke, N. (2022). Cloud-native applications and services. Future Internet, 14(12), 346. https://doi.org/10.3390/fi14120346

Seth, D., & Chintale, P. (2024). Performance benchmarking of serverless computing platforms. International Journal of Computer Trends and Technology, 72(6), 160–167. https://doi.org/10.14445/22312803/IJCTT-V72I6P121

OWASP Foundation. (n.d.). OWASP serverless top 10. https://owasp.org/www-project-serverless-top-10/

Escaleira, P., Cunha, V. A., Barraca, J. P., Gomes, D., & Aguia, R. L. (2025). A systematic review on security mechanisms for serverless computing. Cluster Computing, 28, 465. https://doi.org/10.1007/s10586-025-05371-4

Blessing, M. (2024). Zero trust architecture in cloud environments. https://www.researchgate.net/publication/383660764_Zero_Trust_Architecture_in_Cloud_Environments

Tarandach, I., & Coles, M. J. (2020). Threat modeling: A practical guide for development teams. O’Reilly Media.

More, P., Masarkar, S., Rawate, S., & Khan, T. (2025). Building a scalable serverless web application using AWS Lambda, API Gateway, and DynamoDB. In Proceedings of the International Conference on Communication and Smart Devices (ICCoSD 2025). https://doi.org/10.1109/ICCoSD66074.2025.11348408

Locust.io. (2025). Locust documentation: Distributed load generation. https://docs.locust.io/en/stable/

PostgreSQL Global Development Group. (2023). PostgreSQL 16 documentation: Connection pooling and performance. https://www.postgresql.org/docs/16/

Jonas, E., Schleier-Smith, J., Sreekanti, V., Tsai, C.-C., Khandelwal, A., Pu, Q., Shankar, V., Carreira, J., Krauth, K., Yadwadkar, N., Gonzalez, J. E., Popa, R. A., Stoica, I., & Patterson, D. A. (2019). Cloud programming simplified: A Berkeley view on serverless computing. arXiv. https://doi.org/10.48550/arXiv.1902.03383

Downloads


Abstract views: 5

Published

2026-06-25

How to Cite

Horpenyuk, A., Luzhetska, N., Horpenyuk, M., & Horpenyuk, O. (2026). AN INTEGRATED APPROACH TO EVALUATING PAAS AND FAAS ARCHITECTURES IN HIGH-LOAD SYSTEMS. Electronic Professional Scientific Journal «Cybersecurity: Education, Science, Technique», 1(33), 583–595. https://doi.org/10.28925/2663-4023.2026.33.1233