URI: ProcessCommsInference
Description: Process-process communication inference rules and state.
Finds an Attack Path starting from a subnet off a Service Channel, the path from which extends a subpath of the Service Channel path, a gateway segment visited along that path, and the subnet and interface on the attacker side of that gateway.
Finds a client-service channel, the client and service, and an access context at the client.
Finds a client-service channel, the client and service, and an access context at the client in which the client can access the channel.
Finds a client-service channel, the client and service, and an access context on each side, where the channel can be accessed from the client.
Finds a service channel from a client to a service with a network path from an attacker subnet into the channel via a closed subnet, where the network path is consistent with an extension of the on-channel subpath.
Finds a Service Channel from a client process to a service, and a logical subnet from which source addresses are obscured by NAT.
Finds a Service Channel from a client process to a service, and a logical subnet from which source addresses remain unaltered by NAT.
Finds a client using a reverse proxy that uses a service.
Finds a DataFlow via a DataStep from a Process.
Finds a client-service channel, the client and service, and an access context at the client where it can access the channel, plus a data flow over the channel from client to service.
Finds a client-service channel, the client and service, and an access context at the service where it can be accessed via the channel, plus a data flow over the channel from client to service.
Finds a client-service channel, the client and service, and an access context at the client where it can access the channel, plus a data flow over the channel from service to client.
Finds a client-service channel, the client and service, and an access context at the service where it can be accessed via the channel, plus a data flow over the channel from service to client.
Finds a DataFlow to a Process.
Finds a data flow via two processes, one of which is indirectly a client of the other via a chain of credential sharing/forwarding intermediaries.
Finds a Process that creates data and sends it to a service over one channel, and has a location access context in which it can connect to the service by access may be interrupted.
Finds a Process that creates data in a context, and sends it to a service over a channel.
Finds a Process that receives a data flow from a service over one channel, and sends the same data in a data flow to a service over a second channel.
Finds a Process that receives a data flow from a client over one channel, and reads data in a data flow from a service over a second channel, plus an associated process location context in which the process can be accessed via the first channel but access to the service over the second may be interrupted.
Finds a Process that receives a data flow from a client over one channel, and sends the same data in a data flow to a service over a second channel, plus an associated process location context in which the process can be accessed via the first channel but access to the service over the second may be interrupted.
Finds a process that receives data over a channel from a client, and sends the data over a channel from a client, plus the process host.
Finds a Process that reads (needs) a data flow from a service over one channel, and reads (needs) a data flow from a service over a second channel, plus the process host.
Finds a process that reads (needs) data sent over a channel from a client, and a second channel to the process that may or may not be from a distinct client, plus the process host.
Finds a client-service channel to a service, and a location context at the service where it can be accessed via the channel, plus a data flow over the channel from client to service which flows to the service in that context and is used as input by the service.
Finds a service channel via a closed subnet (before a subsequent NAT gateway) and a network path into the channel via this subnet traversing a single logical segment.
Finds a service channel via a closed subnet (before a subsequent NAT gateway) with a nework path to the channel via this subnet, and an extension via a logical segment from an attacker subnet.
Finds a Service Channel traversing a NAT segment (with its interfaces) after which source addresses can be distinguished from a client.
Finds a Logical Path traversing a logical segment, and the subnets on either side, where source addresses in the subnet after the segment are not meaningfully comparable to client addresses.
Finds a service channel via a client path from a subnet in the channel to an interface on a subnet at or after the start of the attack path.
Finds an Attack Path starting from a subnet in a Service Channel, the path from which is a subpath of the Service Channel path, a gateway segment visited along that path, and the subnet and interface on the attacker side of that gateway.
Finds a reverse proxy using a second reverse proxy that uses a service, with mutual authentication at each step.
Finds a Service Attack Path starting off a Service Channel, and the path from the attacker subnet which is an extension of the Service Channel path, plus the Interface from the attacker subnet to the first gateway on the Attack Path.
Finds a client that is not a remote access service accessing a service, not via a deputy and not via a shell process on the service host.
Finds a client-service channel, the client and service, and an access context at the client in which the client can access the channel, and the service cannot be in a context where access to it would be interrupted.
Finds a client-service channel, the client and service, and an access context at the client, where the client cannot access the channel in that context.
Finds a client-service channel, the client and service, and an access context on each side, where the channel can be accessed from the client in its context, but the service cannot be accessed in its context.
Finds a client and service between which there is as yet no service channel, running on different hosts connected to different logical subnets that are not hotspots, connected by a network path in which neither host is a gateway.
Finds a client and service on different hosts connected to the same network that is not a hotspot, and there is no existing service channel between them when the respective hosts are in locations where the network is accessible.
Finds a client using a service not via a remote access service or a reverse proxy chain, where the client and service are both able to exchange data.
Finds a Client using a Service as such (i.e., not via the host shell) using forwarded or shared credentials, and also using a third Process for authentication which controls the Service without being used by it.
Finds a client process using a service indirectly using another service, where there is no link yet indictating that the client could communicate indirectly with the second service.
Finds a client process using a service using another service, where there is no link yet indictating that the client could communicate indirectly with the second service.
Finds a client using a service for application or authentication and also controlled by the service.
Finds a client directly using a reverse proxy that uses a service, where the client has as yet no link indicating that the client is indirectly using the service.
Finds a data flow via two processes, one of which is indirectly a client of the other via a chain of credential sharing/forwarding intermediaries, and the Client has no other client in the same chain, and the service has no other service in the same chain.
Finds a Process that creates data not stored on its host, which it sends to a service, and has a location access context where it can connect to the service but where access to the service may be interrupted.
Finds a Process that creates data in a context that is not stored on its host, and sends it to a service over a channel that cannot be accessed in this context.
Finds a Process that receives a data flow not saved on its host from a service over one channel, and sends the same data in a data flow to a different service over a second channel, where the Process has no location context in which it can access the first service and access cannot be interrupted to the second service.
Finds a Process that receives a data flow not saved on its host from a client over one channel, and reads (needs) different data also not saved on its host in a data flow from a service over a second channel, plus an associated process location context in which the process can be accessed via the first channel but access to the service over the second may be interrupted.
Finds a Process that receives a data flow not saved on its host from a client over one channel, and sends the same data in a data flow to a service over a second channel, plus an associated process location context in which the process can be accessed via the first channel but access to the service over the second may be interrupted.
Finds a process that receives data over a channel from a client, and sends the data over a channel from a different client, plus the process host which does not store the data.
Finds a Process that reads (needs) data not saved on its host sent from a service over one channel, and reads (needs) different data not saved on its host from a different service over a second channel, plus the process host, where the Process has no location context in which it can access the first service and access cannot be interrupted to the second service.
Finds a process that reads (needs) data sent over a channel from a client and not saved on its host, and a second channel to the process from a distinct client, plus the process host.
Finds a client-service channel to a service, and a location context at the service where it can be accessed via the channel, plus a data flow over the channel from client to service which flows to the service in that context, is used as input and not stored on the service host.
Finds a service channel via a closed subnet (before a subsequent NAT gateway) and a network path into the channel via this subnet traversing an unblocked logical segment from a subnet not in the service channel.
Finds a service channel via a closed subnet (before a subsequent NAT gateway) with a nework path to the channel via this subnet, and an extension via an unblocked logical segment from a subnet not in the service channel.
Finds a service channel traversing a logical segment, where the subnet after the segment has source addresses that cannot be distinguished from a client source address, and this has not yet been inferred for the subnet before the segment.
Finds a service channel via a client path from a subnet in the channel to an interface on a subnet at or after the start of the client path.
Finds a Service Channel that visits a Logical Subnet, with no relationship indicating that source addresses cannot be distinguished from a client.
Finds a reverse proxy using a second reverse proxy that uses a service, with mutual authentication at each step, and with no link indicating that the first proxy may indirectly use the service.
Finds a solo reverse proxy process, and adds an isProxy self-referential link so the process can be selectivly included or excluded in later patterns.
Finds a reverse proxy directly using a service, and adds a link marking the relationship as service use as a proxy.
Finds a reverse proxy using a second reverse proxy that uses a service, but with no link indicating that the first proxy may indirectly use the service. Adds the missing link.
Finds a client directly using a reverse proxy that uses a service, where the client has as yet no link indicating that the client is indirectly using the service. Adds the missing links.
Finds a client process using a service using another service, where there is no link yet indictating that the client could communicate indirectly with the second service. Adds the missing link.
Finds a client process using a service indirectly using another service, where there is no link yet indictating that the client could communicate indirectly with the second service. Adds the missing link.
Finds a remote desktop client using a reverse proxy chain that provides access to a remote desktop service. Adds links specifying that the client accesses the proxy and service remotely.
Finds a remote terminal client using a reverse proxy chain that provides access to a remote access service. Adds links specifying that the client accesses the proxy and service remotely.
Finds a remote desktop client using a reverse proxy chain that provides access to an interactive process. Adds links specifying that the client accesses the proxy and process remotely.
Finds a remote terminal client using a reverse proxy chain that provides access to a console (command line interactive) process. Adds links specifying that the client accesses the proxy and process remotely.
Finds a Host running a Process that is neither a remote access service nor a reverse proxy, but is used via a reverse proxy chain by a Remote Desktop client, not mediated by a collocated remote access service. Adds an inferred mediating Desktop Service.
Finds a Host running a Process that is neither a remote access service nor a reverse proxy, but is used via a reverse proxy chain by a Remote Terminal client, not mediated by a collocated remote access service. Adds an inferred mediating Login Service.
Finds a host running a process that is not a reverse proxy or a remote access service, and a remote access service that uses the process, and is used via a reverse proxy chain by a remote access client. Adds links to specify that the remote access client has remote access to the service via the proxy and the RAS.
Finds a human interacting with a remote access client on a local host that is remotely using a process that is not a proxy, adds a link specifying that the human can interact remotely with the process.
Finds a host running a remote access service that launches a process which is used by a client that it also controls, implying the client forwards credentials to the process. Adds a link indicating credential forwarding goes via the remote access service.
Finds a host running a remote access service that launches a process which uses a service by which it is also controlled, implying that the process uses forwarded credentials to access the service. Adds a link indicating the credentials are forwarded via the remote access service from its client.
Finds a host running a remote access service that launches a process which is used by a client where both it and the client are controlled by the same authenticator, implying the client forwards credentials obtained from the authenticator to the process. Adds a link indicating the credentials are forwarded via the remote access service.
Finds a host running a remote access service that launches a process which uses a service, where the service and the process are controlled by the same authenticator, implying that the process accesses the service using a token shared with it by a client. Adds a link indicating the token is passed via the remote access service from its client.
Finds a Client using a Service with forwarded or shared credentials, and also using a third Process for authentication which controls the Service without being used by it. Adds a link to specify that the Client forwards credentials also to the authenticator Process.
Finds a client using a service for application or authentication and also controlled by the service. Adds a link to say that the first process uses forwarded or shared credentials to authenticate with the second.
Finds a client using a service for application or authentication, not via a remote access service, where both client and service are controlled by the same process. Adds a link to specify that the client is sharing or forwarding credentials used at the service.
Finds a client using a service with shared or forwarded credentials, where the service uses another service in the same way, and there is no link yet indicating that the client and the second service are in a credential sharing chain. Adds this missing link.
Finds a client accessing a process that directly or indirectly uses a service, where the process shares or forwards client credentials and sends them to the service, and there is no link saying the client is sending shared credentials to the service. Adds this link.
Finds a client using a service, both of which are able to exchange data, and having at least one service channel indicating they are communicating with each other directly (not via a proxy), and creates a Data Exchange between them.
Finds a data flow from a service requested by an indirect client, where the service creates the data flow by decrypting an inbound data asset controlled by a vault, which does not control the outbound data flow. Adds links to say the Client authenticates to the vault to get a token, and the Service exchanges this for keys, verifying rights of the indirect client.
Finds a data flow to a service from an indirect client, where the service encrypts the data flow to create an outbound data asset controlled by a vault, which does not control the inbound data flow. Adds links to say the Client authenticates to the vault to get a token, and the Service exchanges this for keys, verifying rights of the indirect client.
Finds a data flow from a service to an indirect client, where the client encrypts the data flow to create an outbound data asset controlled by a vault, which does not control the inbound data flow. Adds links to say the Client authenticates to the vault to get a key.
Finds a data flow to a service from an indirect client, where the client creates the data flow from an inbound data asset controlled by a vault, which does not control the outbound data flow. Adds links to say the Client authenticates to the vault to get a key.
Finds a DataFlow via a DataStep from a Process, and adds a link to say the DataFlow goes via the Process.
Finds a DataFlow to a Process, and adds a link to say the DataFlow goes via the Process.
Finds a data flow via two processes, one of which is indirectly a client of the other via a chain of credential sharing/forwarding intermediaries, and the Client has no other client in the same chain, and the service has no other service in the same chain. Adds a uses relationship from the client to the service, since the client must access the service via the chain in order to exchange data.
Finds a client sending an authorization token to a service which uses a separate OAuth-style process to validate and exchange the token.
Finds a client accessing a process that is in a credential forwarding chain with a service used indirectly by the client (i.e., the service is at the end of the chain). Adds links to say the back end service handles authentication for former.
Finds a client using a service, where the service is controlled by another process that is not itself used by the service, i.e. the process is an OIDC-style authenticator. Adds relationships specifying that the client is redirected to the authenticator by the service, and does not authenticate directly with the service.
Adds a Client Channel between a Client and Service that communicate directly (not via a proxy).
Finds a client channel whose client and service are collocated on a host that is not a cluster, and an internal (socket) LAN provided by the host accessible in a space, and inserts a service channel between client and service via the socket LAN.
Finds a client channel whose client and service are collocated on a cluster host that is accessible in a space, and an L3 Subnet connecting to the cluster, and inserts a service channel between client and service via the Subnet.
Finds a client and service whose hosts are paired, and creates a service channel via the pair.
Finds a client and service on different hosts connected to the same subnet that is not a hotspot, and adds a service channel on the zero-length path via the common subnet.
Finds a client and service between which there is as yet no service channel, running on different unpaired hosts connected to different logical subnets that are not hotspots, connected by a network path in which neither host is a gateway, and adds a service channel between client and service.
Finds a service channel via a logical path that traverses a logical segment, and adds the dependency to the service channel.
Finds a service channel via a logical path that visits a subnet, adds a link to say the service channel also visits that subnet.
Finds a service channel that traverses a logical segment, along with the inbound and outbound interfaces to the segment host, and adds dependencies on the outbound interface to the service channel.
Finds a service channel that traverses a logical segment, along with the inbound and outbound interfaces to the segment host, and adds dependencies on the inbound interface to the service channel.
Finds a Service Channel that traverses a NAT segment, and adds a link to specify that source addresses in the subnet before the segment cannot be distinguished from the client source address.
Finds a service channel traversing a logical segment, where the subnet after the segment has source addresses that cannot be distinguished from a client source address, and adds a link to indicate the same must be true of the subnet before the segment.
Finds a service channel that visits a Logical Subnet, and there is no relationship indicating that source addresses cannot be distinguished from a client, and adds a relationship indicating that they can.
Finds a Service Channel traversing a NAT segment (with its interfaces) after which source addresses can be distinguished from a client, and adds the outbound interface from the segment as the last interface for the Service Channel
Finds a Service Channel via a Logical Path from a Client, the Client Host, Subnet and Interface, where the Service Channel has no last interface, and sets this to the client interface.
Adds a relationship between client and service channels between the same pair of processes.
Finds a Client Channel via a Service Channel that visits a Logical Subnet, and inserts the same relationship from the Client Channel.
Finds a Client Channel via a Service Channel that goes from an Interface, and inserts the same relationship from the Client Channel.
Finds a Client Channel via a Service Channel that goes to an Interface, and inserts the same relationship from the Client Channel.
Finds a Client Channel via a Service Channel that goes via an Interface, and inserts the same relationship from the Client Channel.
Finds a Client Channel via a Service Channel that goes via a Logical Segment, and inserts the same relationship from the Client Channel.
Finds a client indirectly accessing a process via a credential sharing/forwarding chain, and adds a client channel representing their trust relationship.
Finds a client providing authorization claims to a remote service, where there is no client channel linking the two. Adds an Auth Channel to represent the indirect relationship.
Finds a client accessing a service indirectly, via one intermediary which communicates directly with both, plus the auth channels between client and service and between each and the intermediary process. Adds dependency links between the channels.
Finds a client accessing a service indirectly, where there is more than one intermediary, plus the first intermediary adjacent to the client, and channels between client and service and between the client and this intermediary process. Adds dependency links between the channels.
Finds a client accessing a service via more than one intermediary, plus the last intermediary adjacent to the service, and channels between client and service and between this intermediary process and the service. Adds dependency links between the channels.
Finds a client accessing a service via at least two intermediaries, and two intermediaries that are adjacent, and the channels between client and service and between these two intermediary processes. Adds dependency links between the channels.
Finds a Client Channel from a Client process that goes via a Logical Subnet and also via another Client Channel (i.e. the client and service communicate via a credential sharing/forwarding chain). Adds a link specifying that the indirect Client Channel also goes via the same subnet.
Finds a client and process connected via a channel, where the client also uses another service that controls the process, along with the associated channels, where the Client, Process and Service are not in a credential sharing chain. Adds links between the channels to indicate their dependencies.
Finds a client providing authentication credentials to a process which uses a service to validate those credentials, along with the channels between each pair of processes, where the Client, Process and Service are not in a credential sharing chain. Adds links between the channels to indicate their dependencies.
Finds a client providing indirect authorization credentials to a process which uses a service to validate those credentials, along with the channels between each pair of processes, where the Client, Process and Service are not in a credential sharing chain. Adds links between the channels to indicate their dependencies.
Finds a client and service plus the associated client channel where there is a data step from the client to the service, and adds a link saying the data flows via the client channel.
Finds a client and service plus the associated client channel where there is a data step from the service to the client, and adds a link saying the data flows via the client channel.
Finds a client sending a flow of data to a service via a chain of intermediaries, over which the client communications authentication or authorization credentials, and adds a link to say the data flow depends on the end-to-end channel.
Finds a client receiving a flow of data from a service via a credential forwarding/sharing chain, and the associated client channel, and adds a link to say the data flow depends on the client channel.
Finds a Service Channel from a client process to a service, and a logical subnet visited by it, and creates a client path from that subnet to the service.
Finds a service channel via a client path from a subnet in the channel to an interface on a subnet at or after the start of the client path, and adds links from the client path to the visited subnet and interface.
Finds a client channel via a service channel that is via a client path, and makes the client channel also via the client path.
Finds a Service Channel from a client process to a service, and a logical subnet from which source addresses are unaltered by NAT, and creates an open client attack path from subnet to service.
Finds a Service Channel from a client process to a service, and a logical subnet from which source addresses are obscured by NAT, and creates a closed client attack path from subnet to service.
Finds a service channel via a closed subnet (before a subsequent NAT gateway) and a network path into the channel via this subnet traversing an unblocked logical segment from a subnet not in the service channel. Adds a pathTo link signifying this network path is from a possible attacker subnet.
Finds a service channel via a closed subnet (before a subsequent NAT gateway) with a nework path to the channel via this subnet, and an extension via an unblocked logical segment from a subnet not in the service channel. Adds a pathTo link signifying the extended network path is from a possible attacker subnet.
Finds a service channel from a client to a service with a network path from an attacker subnet into the channel via a closed subnet, where the path there is consistent with an extensiono of the on-channel subpath. Creates a closed client attack path from the attacker subnet via the network path and channel.
Finds a service channel from a last interface to a service process via an attack path, and adds links between the attack path and the service and last interface.
Finds a Client Channel via a Service Channel that goes via an Attack Path, and creates the direct link from the Client Channel to the Attack Path.
Finds a Client Channel via a proxy Client Channel that goes via a Client Attack Path, and creates the direct link from the Client Channel to the Client Attack Path.
Finds a Closed Client Attack Path from a logical subnet to a service process, and creates a related Closed Service Attack Path from the subnet to the service.
Finds an Open Client Attack Path from a logical subnet to a service process, and creates a related Open Service Attack Path from the subnet to the service.
Finds a Client Attack Path via a Service Attack Path and a Network Path, and adds a link from the Service Attack Path to the Network Path.
Finds a client attack path via a service attack path where the former has a last interface, and adds this interface to the latter.
Finds a Service Attack Path from the start of a Service Channel and going via a subnet to a logical segment via an interface. Adds links from the Service Attack Path to the interface and subnet.
Finds a Service Attack Path starting in a Service Channel and going via a subnet to a logical segment via an interface. Adds links from the Service Attack Path to the interface and subnet.
Finds a Service Attack Path starting off a Service Channel and going via a subnet to a logical segment via an interface. Adds links from the Service Attack Path to the interface and subnet.
Finds a service channel linked with a closed client attack path from a logical subnet to the service process.
Finds a service and its host connected to a subnet with the associated network access context, and a service channel from the client via the subnet, and adds a link to say the service can be accessed by this client via this network access context.
Finds a client channel via a service channel which gives access to a service in a process context, and adds that the client channel gives access in that context.
Finds a Client accessing a Service via a Proxy, with the channel between the Client and Service, the channel from the last Proxy, the client and service hosts, and a service context in which the service can be accessed via the proxy channel, and adds a link to say the service can also be accessed via the end-to-end channel in this context.
Finds an attack path via a service channel which gives access to a service in a process context, and adds that the attack path gives access in that context.
Finds a client and its host and a service channel to the service via a logical subnet to which the host is connected, plus the associated network context, and adds a link to say the service can be accessed from this client via this network access context.
Finds a client channel via a service channel which is accessible to a client in a process context, and adds that the client channel is accessible in that context.
Finds a Client accessing a Service via a Proxy, with the channel between the Client and Service, the channel to the first Proxy, and the client and service hosts, plus a client context in which the client can access the proxy channel, and adds a link to say the service can also be accessed via the end-to-end channel in this context.
Finds a client-service channel, the client and service, and an access context at the client, where the client cannot access the channel in that context. Adds a link to indicate that access to the service is interrupted when the client is in this context.
Finds a client-service channel, the client and service, and an access context on each side, where the channel can be accessed from the client in its context, but the service cannot be accessed in its context. Adds a link to indicate that access to the service is interrupted when the client is in this context.
Finds a client-service channel, the client and service, and an access context at the client in which the client can access the channel, and the service cannot be in a context where access to it would be interrupted. Adds a link to say access from the client cannot be interrupted in this sense.
Finds a client-service channel, the client and service, and an access context at the client where it can access the channel, plus a data flow over the channel from client to service. Adds a link to say the data flows from the client in that context.
Finds a client-service channel, the client and service, and an access context at the client where it can access the channel, plus a data flow over the channel from service to client. Adds a link to say the data flows to the client in that context.
Finds a client-service channel, the client and service, and an access context at the service where it can be accessed via the channel, plus a data flow over the channel from service to client. Adds a link to say the data flows from the service in that context.
Finds a client-service channel, the client and service, and an access context at the service where it can be accessed via the channel, plus a data flow over the channel from client to service. Adds a link to say the data flows to the service in that context.
Finds a process that receives data over a channel from a client, and sends the data over a channel from a different client, plus the process host which does not store the data. Adds a cache copy of the data flow on the host.
Finds a Process that receives a data flow not saved on its host from a client over one channel, and sends the same data in a data flow to a service over a second channel, plus an associated process location context in which the process can be accessed via the first channel but access to the service over the second may be interrupted. Adds a cache copy of the data flow on the host.
Finds a Process that receives a data flow not saved on its host from a service over one channel, and sends the same data in a data flow to a different service over a second channel, where the Process has no location context in which it can access the first service and access cannot be interrupted to the second service. Adds a cache copy of the data flow on the host.
Finds a process that reads (needs) data sent over a channel from a client and not saved on its host, and a second channel to the process from a distinct client, plus the process host. Adds a cache copy of the data flow on the host. The data need not be forwarded to the second client, but it still has to be saved because it is a necessary input that must be available when next processing requests for the second client.
Finds a Process that receives a data flow not saved on its host from a client over one channel, and reads (needs) different data also not saved on its host in a data flow from a service over a second channel, plus an associated process location context in which the process can be accessed via the first channel but access to the service over the second may be interrupted. Adds a cache copy of the first data flow on the host. This data is cached because the process must delay processing the first client request until the second (necessary) input can be accessed.
Finds a Process that reads (needs) data not saved on its host sent from a service over one channel, and reads (needs) different data not saved on its host from a different service over a second channel, plus the process host, where the Process has no location context in which it can access the first service and access cannot be interrupted to the second service. Adds a cache copy of the first data flow on the host. This data is cached because the process must delay processing until the second (necessary) input can be accessed.
Finds a Process that creates data not stored on its host, which it sends to a service, and has a location access context where it can connect to the service but where access to the service may be interrupted. Adds a cache copy of the data flow on the host. This data is cached because by the time it is processed, the service may have moved out of range, so transmission may be delayed.
Finds a client-service channel to a service, and a location context at the service where it can be accessed via the channel, plus a data flow over the channel from client to service which flows to the service in that context, is used as input and not stored on the service host. Adds a link to say that the service must run (compute output) in that context.
Finds a Process that creates data in a context that is not stored on its host, and sends it to a service over a channel that cannot be accessed in this context. Adds a cache copy of the data flow on the host. This data is cached because it is created when the service is inaccessible, so transmission must be delayed.
Finds a client and its host and a service channel to the service via a logical subnet (not the Internet) to which the host need not be connected, accessible from a space in which the host need not be located, and adds a process network access context with connections including the fact that the client can access the service via this subnet from this space.
Finds a client and its host and a service channel to the service via the Internet to which the host need not be connected, accessible from the World in which the host need not be located, and adds a process network access context with connections including the fact that the client can access the service via this subnet from this space.
Finds a Client accessing a Service via a Proxy, with the channel between the Client and Service, the channel to the first Proxy, and the client and service hosts, plus a client context in which the client can access the proxy channel, and adds a link to say the service can also be accessed via the end-to-end channel in this context. This is a repeated application of a previous pattern to fill in the access links for reconnection contexts.
Finds a client-service channel, the client and service, and an access context at the client where it can access the channel, plus a data flow over the channel from client to service. Adds a link to say the data flows from the client in that context. This pattern was used before, but contexts in which stolen devices may reconnect were added after that, so it is used again to create links to the stolen device reconnection contexts.
Finds a client-service channel, the client and service, and an access context at the client where it can access the channel, plus a data flow over the channel from service to client. Adds a link to say the data flows to the client in that context. This pattern was used before, but contexts in which stolen devices may reconnect were added after that, so it is used again to create links to the stolen device reconnection contexts.
Finds a client-service channel, the client and service, and an access context at the service where it can be accessed via the channel, plus a data flow over the channel from service to client. Adds a link to say the data flows from the service in that context. This pattern was used before, but contexts in which stolen devices may reconnect were added after that, so it is used again to create links to the stolen device reconnection contexts.
Finds a client-service channel, the client and service, and an access context at the service where it can be accessed via the channel, plus a data flow over the channel from client to service. Adds a link to say the data flows to the service in that context. This pattern was used before, but contexts in which stolen devices may reconnect were added after that, so it is used again to create links to the stolen device reconnection contexts.
(empty)
