Secure containers leverage hardware virtualization to isolate container sandboxes, enabling dedicated guest kernels to mitigate shared kernel attacks prevalent in traditional systems. However, existing approaches struggle with a fundamental trade-off: VM-based solutions (e.g., Kata) prioritize performance but lack elasticity and on-demand usage for volatile and bursty workloads, while lightweight methods (e.g., gVisor) rely on the host kernel for dynamic resource management at the cost of significant performance degradation due to guest-host dependencies.

Along with the dramatic rising of data rate, user-centric network (UCN) is regarded as a promising concept. However, densely deployed same-frequency small base stations (SBSs) in UCN deteriorates the user performance. Coordinated multipoint (CoMP) is an important technique for alleviating inter-cell interference. In this paper, to combat the severe interference, we proposed a user-centric cooperation scheme-Voronoi CoMP in a cell-less architecture. In this scheme, users are assigned their own clusters of SBSs respectively and the clusters for different users are not overlapped. This CoMP structure ensures that each user served by the base stations which are the closest ones of all SBSs to it and this will maximize the useful power of each user and in the meantime minimize the interference. The numerical results and simulations show that the proposed CoMP scheme can indeed promote the performance of dense small cell network (DSCN) corresponding to the designed metrics.