{"id":"https://openalex.org/W7204016170","doi":null,"title":"Black-Box Denial-of-Service Against Large Reasoning Model Serving Infrastructure","display_name":"Black-Box Denial-of-Service Against Large Reasoning Model Serving Infrastructure","publication_year":2026,"publication_date":"2026-07-02","ids":{"openalex":"https://openalex.org/W7204016170"},"language":"en","primary_location":{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/147302","doi":null,"is_oa":true,"landing_page_url":"https://aaltodoc.aalto.fi/handle/123456789/147302","pdf_url":"https://aaltodoc.aalto.fi/bitstreams/5e243434-1fba-43df-bb17-462f49a0da27/download","source":{"id":"https://openalex.org/S4306401662","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"G2 Pro gradu, diplomity\u00f6"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://aaltodoc.aalto.fi/bitstreams/5e243434-1fba-43df-bb17-462f49a0da27/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5147877273","display_name":"Leo Saied Ahmad","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Saied Ahmad, Leo","raw_affiliation_strings":["Department of Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5147877273"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0031999999191612005,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.8899999856948853},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.8270000219345093},{"id":"https://openalex.org/keywords/large-reasoning-models","display_name":"large reasoning models","score":0.9169999957084656},{"id":"https://openalex.org/keywords/chain-of-thought","display_name":"chain-of-thought","score":0.7639999985694885},{"id":"https://openalex.org/keywords/black-box-attacks","display_name":"black-box attacks","score":0.7929999828338623},{"id":"https://openalex.org/keywords/prompt-engineering","display_name":"prompt engineering","score":0.5659999847412109},{"id":"https://openalex.org/keywords/vllm","display_name":"vLLM","score":0.765999972820282},{"id":"https://openalex.org/keywords/kubernetes","display_name":"Kubernetes","score":0.7110000252723694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.784600019454956},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7059000134468079},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5462999939918518},{"id":"https://openalex.org/C46743427","wikidata":"https://www.wikidata.org/wiki/Q1341685","display_name":"Inference engine","level":3,"score":0.5085999965667725},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.4961000084877014},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4848000109195709},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.48089998960494995},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.4562999904155731},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.445499986410141},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.3944000005722046},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.38499999046325684},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.35589998960494995},{"id":"https://openalex.org/C159032336","wikidata":"https://www.wikidata.org/wiki/Q2488768","display_name":"Non-monotonic logic","level":2,"score":0.3447999954223633},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32839998602867126},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.32120001316070557},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.3206000030040741},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3019999861717224},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C146778888","wikidata":"https://www.wikidata.org/wiki/Q836862","display_name":"Installation","level":2,"score":0.258899986743927},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.2567000091075897},{"id":"https://openalex.org/C2778751112","wikidata":"https://www.wikidata.org/wiki/Q835016","display_name":"Window (computing)","level":2,"score":0.2556999921798706}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/147302","doi":null,"is_oa":true,"landing_page_url":"https://aaltodoc.aalto.fi/handle/123456789/147302","pdf_url":"https://aaltodoc.aalto.fi/bitstreams/5e243434-1fba-43df-bb17-462f49a0da27/download","source":{"id":"https://openalex.org/S4306401662","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"G2 Pro gradu, diplomity\u00f6"}],"best_oa_location":{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/147302","doi":null,"is_oa":true,"landing_page_url":"https://aaltodoc.aalto.fi/handle/123456789/147302","pdf_url":"https://aaltodoc.aalto.fi/bitstreams/5e243434-1fba-43df-bb17-462f49a0da27/download","source":{"id":"https://openalex.org/S4306401662","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"G2 Pro gradu, diplomity\u00f6"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204016170.pdf","grobid_xml":"https://content.openalex.org/works/W7204016170.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W1816313093","https://openalex.org/W2626778328","https://openalex.org/W3030163527","https://openalex.org/W4387321091","https://openalex.org/W4392886466","https://openalex.org/W4393853379","https://openalex.org/W4399696137","https://openalex.org/W4405902820","https://openalex.org/W4407186872","https://openalex.org/W4407217670","https://openalex.org/W4412888242","https://openalex.org/W4414281281","https://openalex.org/W4414830118","https://openalex.org/W4415109307","https://openalex.org/W4416123688","https://openalex.org/W4416130616","https://openalex.org/W4416352716","https://openalex.org/W4416401424","https://openalex.org/W7127161056","https://openalex.org/W7127288875","https://openalex.org/W7128373965","https://openalex.org/W7128483310","https://openalex.org/W7135035105","https://openalex.org/W7158255212","https://openalex.org/W7160264403"],"related_works":["https://openalex.org/W7127288875","https://openalex.org/W7161175564","https://openalex.org/W7160264403","https://openalex.org/W7113915954","https://openalex.org/W7160961815","https://openalex.org/W7138980835","https://openalex.org/W4415948510","https://openalex.org/W7165642492","https://openalex.org/W4417513142","https://openalex.org/W4415233581"],"abstract_inverted_index":{"Large":[0],"language":[1],"models":[2],"are":[3],"now":[4],"deployed":[5],"at":[6],"scale":[7],"across":[8],"commercial":[9],"and":[10,110,126,172],"production":[11],"systems.":[12],"A":[13],"leading":[14],"edge":[15],"of":[16,70,72,145,162,167],"this":[17],"deployment":[18,118],"is":[19],"the":[20,66,101,136,146],"large":[21,51],"reasoning":[22,52],"model":[23,67],"(LRM),":[24],"which":[25],"generates":[26],"an":[27],"extended":[28],"chain-of-thought":[29],"before":[30],"answering":[31],"to":[32,54,139],"improve":[33],"response":[34],"quality":[35],"on":[36,90,119],"complex":[37],"tasks.":[38],"This":[39,76],"capability,":[40],"however,":[41],"introduces":[42],"a":[43,59,81,97,116,132,174,178],"severe":[44],"compu-":[45],"tational":[46],"asymmetry:":[47],"because":[48],"providers":[49],"allow":[50],"budgets":[53],"avoid":[55],"truncating":[56],"legitimate":[57,141],"reasoning,":[58],"short,":[60],"cheap":[61],"input":[62],"prompt":[63],"can":[64,86],"force":[65],"into":[68,177],"tens":[69],"thousands":[71],"expensive":[73],"output":[74],"tokens.":[75,153],"thesis":[77],"investigates":[78],"how":[79],"effectively":[80],"black-box,":[82],"prompt-induced":[83],"denial-of-service":[84],"attack":[85,103,112,147],"degrade":[87],"LRM":[88],"inference":[89],"realistic":[91],"serving":[92],"infrastructure.":[93],"I":[94],"present":[95],"BrainDrain,":[96],"framework":[98],"that":[99],"combines":[100],"ReasoningBomb":[102],"strategy":[104],"with":[105],"latency-based":[106],"side-channel":[107],"infrastructure":[108],"probing":[109],"routing-aware":[111],"concentration,":[113],"evaluated":[114],"against":[115],"vLLM":[117],"Google":[120],"Kubernetes":[121],"Engine":[122],"in":[123,151],"both":[124],"single-node":[125,130,179],"multi-node":[127,155],"configurations.":[128],"On":[129,154],"infrastructure,":[131,156],"single":[133],"attacker":[134],"renders":[135],"server":[137],"unable":[138],"admit":[140],"requests":[142],"for":[143,149],"53%":[144],"window":[148],"under$3":[150],"induced":[152],"exploiting":[157],"prefix-aware":[158],"routing":[159],"concentrates":[160],"99.9%":[161],"generated":[163],"tokens":[164],"onto":[165],"one":[166],"three":[168],"replicas,":[169],"defeatinghorizontal":[170],"scale-out":[171],"collapsing":[173],"load-balanced":[175],"cluster":[176],"target.":[180]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-08-23T00:00:00"}