1. Apparatus, comprising: a processor; computer memory holding computer program instructions that when executed by the processor minimize application-level denial-of-service with respect to compute resources in a multi-tenant shared infrastructure, the computer program instructions comprising: program code to profile anticipated application behavior in response to one or more requests to generate an application profile having at least one workload constraint, the application profile including a mapping of a request type to a workload and a workload limit; program code operative upon receipt of a request, and prior to execution, to determine whether execution of the request satisfies the at least one workload constraint in the application profile by evaluating whether the request is predicted to result in a workload that exceeds the workload limit, wherein evaluating whether the request is predicted to result in a workload that exceeds the workload limit includes unzipping a file associated with the request in a separate execution thread to determine if decompression of the file results in the workload that exceeds the workload limit; and program code, responsive to determining whether execution of the request satisfies the at least one workload constraint in the application profile, to take a given action.