Resource Cages: A New Abstraction of the Hypervisor for Performance Isolation Considering IDS Offloading. - Kenichi Kourai; Sungho Arai; Kousuke Nakamura; Seigo Okazaki; Shigeru Chiba (CloudCom, 2017)