{"id":"https://openalex.org/W7160264403","doi":"https://doi.org/10.1109/tdsc.2026.3689535","title":"On the Availability Risks of Production LLM Services Under Unbounded Inference","display_name":"On the Availability Risks of Production LLM Services Under Unbounded Inference","publication_year":2026,"publication_date":"2026-05-04","ids":{"openalex":"https://openalex.org/W7160264403","doi":"https://doi.org/10.1109/tdsc.2026.3689535"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3689535","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3689535","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135402220","display_name":"Yunzhe Li","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yunzhe Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5073-5561","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114549755","display_name":"Jianan Wang","orcid":"https://orcid.org/0009-0002-9383-6482"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianan Wang","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135308917","display_name":"Hongzi Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongzi Zhu","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0001-8657-5064","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084400768","display_name":"James Lin","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"James Lin","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135290835","display_name":"Shan Chang","orcid":null},"institutions":[{"id":"https://openalex.org/I181326427","display_name":"Donghua University","ror":"https://ror.org/035psfh38","country_code":"CN","type":"education","lineage":["https://openalex.org/I181326427"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shan Chang","raw_affiliation_strings":["School of Computer Science and Technology, Donghua University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-5253-2549","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Donghua University, Shanghai, China","institution_ids":["https://openalex.org/I181326427"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135296556","display_name":"Minyi Guo","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minyi Guo","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-0034-2302","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.53313871,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"4","first_page":"8940","last_page":"8951"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6306999921798706,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.6306999921798706,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.04690000042319298,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14347","display_name":"Big Data and Digital Economy","score":0.04129999876022339,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6172000169754028},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.49619999527931213},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.487199991941452},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4717000126838684},{"id":"https://openalex.org/keywords/production","display_name":"Production (economics)","score":0.4169999957084656},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.40880000591278076},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.4081999957561493},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.39750000834465027},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.39149999618530273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8190000057220459},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6172000169754028},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.49619999527931213},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.487199991941452},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4717000126838684},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4512999951839447},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.4169999957084656},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.40880000591278076},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.4081999957561493},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.39750000834465027},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3935000002384186},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.39149999618530273},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.3635999858379364},{"id":"https://openalex.org/C165136773","wikidata":"https://www.wikidata.org/wiki/Q1363179","display_name":"Single point of failure","level":2,"score":0.3425000011920929},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.3319000005722046},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.30480000376701355},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.3043000102043152},{"id":"https://openalex.org/C201374245","wikidata":"https://www.wikidata.org/wiki/Q104534","display_name":"Digital subscriber line","level":2,"score":0.2879999876022339},{"id":"https://openalex.org/C2776187449","wikidata":"https://www.wikidata.org/wiki/Q1513879","display_name":"Natural language generation","level":3,"score":0.2766000032424927},{"id":"https://openalex.org/C179603123","wikidata":"https://www.wikidata.org/wiki/Q1941921","display_name":"Modeling language","level":3,"score":0.2750999927520752},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.26829999685287476},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C2779922397","wikidata":"https://www.wikidata.org/wiki/Q5014755","display_name":"CVAR","level":4,"score":0.26570001244544983},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C2778383056","wikidata":"https://www.wikidata.org/wiki/Q873636","display_name":"Namespace","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.25200000405311584}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3689535","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3689535","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G480013122","display_name":null,"funder_award_id":"62432008","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G527724067","display_name":null,"funder_award_id":"62472083","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0],"Language":[1],"Models":[2],"(LLMs)":[3],"have":[4],"become":[5],"foundational":[6],"components":[7],"in":[8,132,156,247],"a":[9,54,105,120,147,157],"wide":[10],"range":[11],"of":[12,57,138,165,221,242],"applications,":[13],"including":[14],"natural":[15],"language":[16],"understanding":[17],"and":[18,22,198,208],"generation,":[19],"embodied":[20],"intelligence,":[21],"scientific":[23],"discovery.":[24],"As":[25],"their":[26],"computational":[27],"requirements":[28],"continue":[29],"to":[30,42,75,94,110,141,169,237,255],"grow,":[31],"these":[32],"models":[33],"are":[34],"increasingly":[35],"deployed":[36],"as":[37,238,240],"cloud-based":[38],"services,":[39],"allowing":[40],"users":[41],"access":[43],"powerful":[44],"LLMs":[45],"via":[46,62],"the":[47,73,218,222],"Internet.":[48],"However,":[49],"this":[50,115,166],"deployment":[51],"model":[52,74,112],"introduces":[53],"new":[55],"class":[56],"threat:":[58],"denial-of-service":[59],"(DoS)":[60],"attacks":[61,84,127],"unbounded":[63],"reasoning,":[64],"where":[65,232],"adversaries":[66],"craft":[67],"specially":[68],"designed":[69],"inputs":[70],"that":[71,173,200],"cause":[72],"enter":[76],"excessively":[77],"long":[78,206],"or":[79,91,176],"infinite":[80],"generation":[81,178],"loops.":[82],"These":[83],"can":[85,202],"exhaust":[86],"backend":[87],"compute":[88],"resources,":[89],"degrading":[90],"denying":[92],"service":[93,235,252],"legitimate":[95],"users.":[96],"To":[97,215],"mitigate":[98],"such":[99],"risks,":[100],"many":[101],"LLM":[102,129,196,230],"providers":[103],"adopt":[104],"closed-source,":[106],"black":[107],"box":[108],"setting":[109],"obscure":[111],"internals.":[113],"In":[114],"paper,":[116],"we":[117,224],"propose":[118],"ThinkTrap,":[119],"novel":[121],"input-space":[122],"optimization":[123,155,167],"framework":[124],"for":[125],"DoS":[126,184],"against":[128],"services":[130,197],"even":[131],"black-box":[133,154,213],"environments.":[134],"The":[135,163],"core":[136],"idea":[137],"ThinkTrap":[139,191,233],"is":[140,168],"first":[142],"map":[143],"discrete":[144],"tokens":[145],"into":[146],"continuous":[148],"embedding":[149],"space,":[150],"then":[151],"undertake":[152],"efficient":[153],"low-dimensional":[158],"subspace":[159],"exploiting":[160],"input":[161],"sparsity.":[162],"goal":[164],"identify":[170],"adversarial":[171],"prompts":[172],"induce":[174,204],"extended":[175],"non-terminating":[177],"across":[179,192],"several":[180],"state-of-the-art":[181],"LLMs,":[182],"achieving":[183],"with":[185],"minimal":[186],"token":[187],"overhead.":[188],"We":[189],"evaluate":[190],"multiple":[193],"commercial,":[194],"closed-source":[195],"observe":[199],"it":[201],"consistently":[203],"abnormally":[205],"outputs":[207],"noticeable":[209],"response-side":[210],"degradation":[211],"under":[212],"access.":[214],"further":[216],"quantify":[217],"system-level":[219],"impact":[220],"attack,":[223],"conduct":[225],"controlled":[226],"experiments":[227],"on":[228],"private":[229],"deployments,":[231],"reduces":[234],"throughput":[236],"low":[239],"1%":[241],"its":[243],"original":[244],"capacity":[245],"and,":[246],"extreme":[248],"cases,":[249],"induces":[250],"complete":[251],"failure":[253],"due":[254],"resource":[256],"exhaustion.":[257]},"counts_by_year":[],"updated_date":"2026-07-11T05:44:25.926202","created_date":"2026-05-06T00:00:00"}