Resource Cages: A New Abstraction of the Hypervisor for Performance Isolation Considering IDS Offloading | IEEE Conference Publication | IEEE Xplore