{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,7]],"date-time":"2026-05-07T00:10:12Z","timestamp":1778112612070,"version":"3.51.4"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032160911","type":"print"},{"value":"9783032160928","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-16092-8_29","type":"book-chapter","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T23:10:47Z","timestamp":1778109047000},"page":"523-543","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Noisy Neighbor: Exploiting RDMA for\u00a0Resource Exhaustion Attacks in\u00a0Containerized Clouds"],"prefix":"10.1007","author":[{"given":"Gunwoo","family":"Kim","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Taejune","family":"Park","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jinwoo","family":"Kim","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"29_CR1","unstructured":"Infiniband Verbs Performance Tests (perftest). https:\/\/github.com\/linux-rdma\/perftest (2022)"},{"key":"29_CR2","unstructured":"Kubernetes Using SR-IOV (2023). https:\/\/docs.nvidia.com\/networking\/display\/mlnxofedv461000\/kubernetes+using+sr-iov"},{"key":"29_CR3","unstructured":"Nvidia Quality of Service and Enhanced Transmission Selection (2023). https:\/\/docs.nvidia.com\/networking\/display\/mlnxenv543750lts\/quality+of+service+(qos)"},{"key":"29_CR4","unstructured":"Nvidia VirtIO-net Emulated Devices (2023). https:\/\/docs.nvidia.com\/networking\/display\/bluefielddpuosv450\/virtio-net+emulated+devices"},{"key":"29_CR5","unstructured":"DOCA Flow API (2025). https:\/\/docs.nvidia.com\/doca\/sdk\/doca+flow\/index.html"},{"key":"29_CR6","unstructured":"DOCA Telemetry Libraries (2025). https:\/\/docs.nvidia.com\/doca\/sdk\/doca+telemetry\/index.html"},{"key":"29_CR7","unstructured":"NVIDIA BlueField-3 DPU (2025). https:\/\/www.nvidia.com\/content\/dam\/en-zz\/Solutions\/Data-Center\/documents\/datasheet-nvidia-bluefield-3-dpu.pdf"},{"key":"29_CR8","unstructured":"NVIDIA DOCA Software Framework (2025). https:\/\/developer.nvidia.com\/networking\/doca"},{"key":"29_CR9","doi-asserted-by":"publisher","first-page":"475","DOI":"10.1016\/j.cose.2013.10.001","volume":"39","author":"M Anagnostopoulos","year":"2013","unstructured":"Anagnostopoulos, M., Kambourakis, G., Kopanos, P., Louloudakis, G., Gritzalis, S.: DNS amplification attack revisited. Comput. Secur. 39, 475\u2013485 (2013)","journal-title":"Comput. Secur."},{"key":"29_CR10","doi-asserted-by":"crossref","unstructured":"Grant, S., Yelam, A., Bland, M., Snoeren, A.C.: SmartNIC performance isolation with FairNIC: programmable networking for the cloud. In: Proceedings of the Annual Conference of the ACM Special Interest Group on Data Communication on the Applications, Technologies, Architectures, and Protocols for Computer Communication (SIGCOMM \u201920), pp. 681\u2013693. ACM (2020)","DOI":"10.1145\/3387514.3405895"},{"key":"29_CR11","doi-asserted-by":"crossref","unstructured":"Guo, C., et al.: RDMA over Commodity Ethernet at Scale. In: Proceedings of the 2016 ACM SIGCOMM Conference, pp. 202\u2013215. ACM (2016)","DOI":"10.1145\/2934872.2934908"},{"key":"29_CR12","unstructured":"Haecki, R., et al.: How to diagnose nanosecond network latencies in rich end-host stacks. In: Proceedings of the 19th USENIX Symposium on Networked Systems Design and Implementation (NSDI), pp. 861\u2013877 (2022)"},{"key":"29_CR13","unstructured":"Khalilov, M., et al.: OSMOSIS: enabling multi-tenancy in datacenter SmartNICs. In: Proceedings of the 2024 USENIX Annual Technical Conference (ATC), pp. 247\u2013263. USENIX (2024)"},{"key":"29_CR14","unstructured":"Kim, D., et al.: FreeFlow: software-based virtual RDMA networking for containerized clouds. In: Proceedings of the 16th USENIX Symposium on Networked Systems Design and Implementation (NSDI), pp. 113\u2013126. USENIX (2019)"},{"key":"29_CR15","unstructured":"Kong, X., et al.: Understanding RDMA microarchitecture resources for performance isolation. In: Proceedings of the 20th USENIX Symposium on Networked Systems Design and Implementation (NSDI), pp. 31\u201348. USENIX (2023)"},{"key":"29_CR16","unstructured":"K\u00fchrer, M., Hupperich, T., Rossow, C., Holz, T.: Exit from hell? Reducing the impact of amplification DDoS attacks. In: Proceedings of the 23rd USENIX Security Symposium (USENIX Security), pp. 111\u2013125. USENIX (2014)"},{"key":"29_CR17","doi-asserted-by":"crossref","unstructured":"Le, Y., et al.: UNO: uniflying host and smart NIC offload for flexible packet processing. In: Proceedings of the 2017 Symposium on Cloud Computing (SoCC), pp. 506\u2013519. ACM (2017)","DOI":"10.1145\/3127479.3132252"},{"key":"29_CR18","unstructured":"Lee, S., Choi, M., Yeom, I., Kim, Y.: PeRF: preemption-enabled RDMA framework. In: Proceedings of the 2024 USENIX Annual Technical Conference (USENIX ATC \u201924), pp. 209\u2013225. USENIX (2024)"},{"key":"29_CR19","doi-asserted-by":"crossref","unstructured":"Li, X., et al.: DockRDMA: hybrid RDMA virtualization for containerized clouds. In: 2024 IEEE 32nd International Conference on Network Protocols (ICNP), pp. 1\u201312. IEEE (2024)","DOI":"10.1109\/ICNP61940.2024.10858532"},{"key":"29_CR20","doi-asserted-by":"crossref","unstructured":"Liu, M., Cui, T., Schuh, H., Krishnamurthy, A., Peter, S., Gupta, K.: Offloading distributed applications onto SmartNICs using iPipe. In: Proceedings of the ACM Special Interest Group on Data Communication (SIGCOMM), pp. 318\u2013333. ACM (2019)","DOI":"10.1145\/3341302.3342079"},{"key":"29_CR21","unstructured":"Liu, W., et al.: Mitigating scalability walls of RDMA-based container networks. In: Proceedings of the 22nd USENIX Symposium on Networked Systems Design and Implementation (NSDI), pp. 1049\u20131065. USENIX (2025)"},{"key":"29_CR22","unstructured":"Lou, J., Kong, X., Huang, J., Bai, W., Kim, N.S., Zhuo, D.: Harmonic: hardware-assisted RDMA performance isolation for public clouds. In: Proceedings of the 21st USENIX Symposium on Networked Systems Design and Implementation (NSDI), pp. 1479\u20131496. USENIX (2024)"},{"key":"29_CR23","unstructured":"Petazzoni, J.: Pipework: Docker Networking Wrapper (2014). https:\/\/github.com\/jpetazzo\/pipework"},{"key":"29_CR24","doi-asserted-by":"crossref","unstructured":"Ristenpart, T., Tromer, E., Shacham, H., Savage, S.: Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In: Proceedings of the 16th ACM conference on Computer and communications security (SIGCOMM), pp. 199\u2013212. ACM (2009)","DOI":"10.1145\/1653662.1653687"},{"key":"29_CR25","unstructured":"Rothenberger, B., Taranov, K., Perrig, A., Hoefler, T.: ReDMArk: bypassing RDMA security mechanisms. In: Proceedings of the 30th USENIX Security Symposium (USENIX Security), pp. 4277\u20134292. USENIX (2021)"},{"key":"29_CR26","doi-asserted-by":"crossref","unstructured":"Shringarputale, S., McDaniel, P., Butler, K., La\u00a0Porta, T.: Co-residency attacks on containers are real. In: Proceedings of the 2020 ACM SIGSAC Conference on Cloud Computing Security Workshop (CCSW), pp. 53\u201366. ACM (2020)","DOI":"10.1145\/3411495.3421357"},{"key":"29_CR27","unstructured":"Sun, Y., Qu, Q., Zhao, C., Krishnamurthy, A., Chang, H., Xiong, Y.: SoR: TCP socket over RDMA container network for cloud native computing. arXiv preprint arXiv:2305.10621 (2023)"},{"key":"29_CR28","doi-asserted-by":"crossref","unstructured":"Wang, S., et al.: LoRDMA: a new low-rate DoS attack in RDMA networks. In: Proceedings of the Network and Distributed System Security Symposium (NDSS) (2024)","DOI":"10.14722\/ndss.2024.24025"},{"key":"29_CR29","unstructured":"Xiao, Y., Tootaghaj, D.Z., Dhakal, A., Cao, L., Sharma, P., Kuzmanovic, A.: Conspirator: SmartNIC-aided control plane for distributed ML workloads. In: Proceedings of the 2024 USENIX Annual Technical Conference (ATC), pp. 767\u2013784 (2024)"},{"key":"29_CR30","unstructured":"Xing, J., Hsu, K.F., Qiu, Y., Yang, Z., Liu, H., Chen, A.: Bedrock: programmable network support for secure RDMA systems. In: Proceedings of the 31st USENIX Security Symposium (USENIX Security), pp. 2585\u20132600. USENIX (2022)"}],"container-title":["Lecture Notes in Computer Science","Computer Security. ESORICS 2025 International Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-16092-8_29","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T23:10:51Z","timestamp":1778109051000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-16092-8_29"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032160911","9783032160928"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-16092-8_29","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Toulouse","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"22 September 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 September 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.esorics2025.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}