Attacking and Defending Serverless