{"id":"https://openalex.org/W4398226334","doi":"https://doi.org/10.1109/tdsc.2024.3403920","title":"Towards Understanding and Defeating Abstract Resource Attacks for Container Platforms","display_name":"Towards Understanding and Defeating Abstract Resource Attacks for Container Platforms","publication_year":2024,"publication_date":"2024-05-22","ids":{"openalex":"https://openalex.org/W4398226334","doi":"https://doi.org/10.1109/tdsc.2024.3403920"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2024.3403920","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3403920","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039734151","display_name":"Wenbo Shen","orcid":"https://orcid.org/0000-0003-2899-6121"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Shen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2899-6121","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008107776","display_name":"Yifei Wu","orcid":"https://orcid.org/0009-0002-2783-8623"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yifei Wu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-2783-8623","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039983338","display_name":"Yutian Yang","orcid":"https://orcid.org/0000-0003-2899-0117"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yutian Yang","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2899-0117","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Qirui Liu","orcid":"https://orcid.org/0009-0005-1917-0397"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qirui Liu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0005-1917-0397","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065913470","display_name":"Nanzi Yang","orcid":"https://orcid.org/0009-0006-9346-6679"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nanzi Yang","raw_affiliation_strings":["Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0009-0006-9346-6679","affiliations":[{"raw_affiliation_string":"Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102839957","display_name":"Jinku Li","orcid":"https://orcid.org/0000-0003-0709-7434"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinku Li","raw_affiliation_strings":["Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-0709-7434","affiliations":[{"raw_affiliation_string":"Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043198742","display_name":"Kangjie Lu","orcid":"https://orcid.org/0000-0002-4763-7354"},"institutions":[{"id":"https://openalex.org/I130238516","display_name":"University of Minnesota","ror":"https://ror.org/017zqws13","country_code":"US","type":"education","lineage":["https://openalex.org/I130238516"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kangjie Lu","raw_affiliation_strings":["University of Minnesota, Minneapolis, USA"],"raw_orcid":"https://orcid.org/0000-0002-4763-7354","affiliations":[{"raw_affiliation_string":"University of Minnesota, Minneapolis, USA","institution_ids":["https://openalex.org/I130238516"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012016098","display_name":"Jianfeng Ma","orcid":"https://orcid.org/0000-0003-4251-1143"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianfeng Ma","raw_affiliation_strings":["Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-4251-1143","affiliations":[{"raw_affiliation_string":"Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8575,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.72608982,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"22","issue":"1","first_page":"474","last_page":"490"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10679","display_name":"Service-Oriented Architecture and Web Services","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.8028900623321533},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.5447538495063782},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5307300686836243},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.41863399744033813},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.32975226640701294},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.2228507399559021},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.06599870324134827}],"concepts":[{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.8028900623321533},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.5447538495063782},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5307300686836243},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.41863399744033813},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.32975226640701294},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2228507399559021},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.06599870324134827},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2024.3403920","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2024.3403920","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1569469665","https://openalex.org/W2075174112","https://openalex.org/W2550874390","https://openalex.org/W2621197600","https://openalex.org/W2753365392","https://openalex.org/W2793974819","https://openalex.org/W2899822557","https://openalex.org/W2902718458","https://openalex.org/W2924430850","https://openalex.org/W2963877979","https://openalex.org/W2985907279","https://openalex.org/W2987375469","https://openalex.org/W3012308217","https://openalex.org/W4226043146","https://openalex.org/W6638282704","https://openalex.org/W6671014687","https://openalex.org/W6730426483","https://openalex.org/W6754288653","https://openalex.org/W6765285382","https://openalex.org/W6766726536","https://openalex.org/W6773836194","https://openalex.org/W6781292765"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2367301169","https://openalex.org/W2974221847","https://openalex.org/W2352134912","https://openalex.org/W2001079144","https://openalex.org/W2390279801","https://openalex.org/W4393477817","https://openalex.org/W2048054615","https://openalex.org/W2480624181"],"abstract_inverted_index":{"OS-level":[0],"virtualization":[1],"(a.k.a.":[2],"container)":[3],"has":[4],"become":[5],"a":[6,47,72],"fundamental":[7],"technology":[8],"in":[9,25,106],"cloud":[10,91],"computing":[11],"due":[12],"to":[13,55,159],"the":[14,18,88,96,107,126,136],"efficiency":[15],"provided":[16],"by":[17],"shared-kernel":[19,84],"design.":[20],"However,":[21],"this":[22],"design":[23,150],"results":[24],"containers":[26],"sharing":[27],"thousands":[28],"of":[29,75],"kernel":[30,45,109],"variables":[31],"and":[32,82,110,135,151,162],"data":[33],"structures":[34],"(termedabstract":[35],"resources),":[36],"which":[37],"are":[38,71],"prevalent":[39],"but":[40],"under-protected.":[41],"Without":[42],"exploiting":[43],"other":[44,60],"vulnerabilities,":[46],"non-privileged":[48],"container":[49,85],"can":[50,171],"easily":[51],"exhaust":[52],"abstract":[53,68,97,104,118,164,174],"resources":[54,105,119],"cause":[56],"DoS":[57],"attacks":[58,70,76],"against":[59,95],"containers.":[61],"Even":[62],"worse,":[63],"our":[64],"experiments":[65],"demonstrate":[66],"that":[67,77],"resource":[69,98,132,138,154,165,175],"broad":[73],"class":[74],"affect":[78],"Linux,":[79],"FreeBSD,":[80],"Fuchsia,":[81],"all":[83],"environments":[86],"on":[87,145],"top":[89],"four":[90],"vendors.":[92],"To":[93,115],"defend":[94],"attack,":[99],"we":[100,121,149],"automatically":[101],"analyze":[102],"vulnerable":[103],"Linux":[108],"detect":[111],"501":[112],"container-exhaustible":[113],"resources.":[114],"confine":[116],"these":[117,146],"dynamically,":[120],"propose":[122],"two":[123,147],"new":[124],"techniques:":[125],"flexible":[127,131,161],"in-kernel":[128],"attachment":[129,134],"for":[130,140],"consumption":[133],"tree-based":[137],"accounting":[139],"efficient":[141,163],"usage":[142,176],"retrieval.":[143],"Based":[144],"techniques,":[148],"implement":[152],"aflexibleabstract":[153],"confinement":[155],"framework,":[156],"named":[157],"Flask,":[158],"achieve":[160],"confinement.":[166],"Our":[167],"evaluation":[168],"shows":[169],"Flask":[170],"efficiently":[172],"limit":[173],"with":[177],"less":[178],"than":[179],"0.6%":[180],"performance":[181],"overhead.":[182]},"counts_by_year":[{"year":2025,"cited_by_count":4}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}