Package Virtualisation

URI: Virtualisation

Description: Model of device and network virtualisation.

R-CCSCHC

Finds a Client Channel via a Service Channel that depends on connectivity represented by a Host Channel.

R-CCSCVC

Finds a Client Channel via a Service Channel that requires connectivity represented by a Virtual Channel.

R-CVHHDC

Finds a clusterable virtual Host provisioned on a physical host at a DataCentre.

R-CVHHH

Finds a cluster VirtualHost provisioned at a Host and running on a PhysicalHost.

R-DCCVH

Finds a Data Centre with a Cluster on which is provisioned a Virtual Host.

R-DCVHC

Finds a DataCentre containing a Cluster of servers, and a Virtual Host.provisioned by the Data Centre.

R-DCVHVS

Finds a Host that is physically in a DataCentre and connected to a virtual subnet.

R-EH

Finds a solo elastically scalable host.

R-GHVS

Finds a gateway providing a virtual subnet to which a host is connected.

R-H2dPH2

Finds two hosts on a virtual subnet and their physical hosts.

R-HACVH

Finds a virtual host provisioned by a host in a space, and a location access context for the second host.

R-HCLSg

Finds a host channel that traverses a logical segment, along with the inbound and outbound interfaces to the segment host.

R-HL

Finds a solo HostLAN

R-HuiVH

Finds a Human interacting with a Virtual Host.

R-HumHVH

Finds a VirtualHost provisioned at a Host managed by a Human.

R-HVH

Finds a VirtualHost provisioned at a Host.

R-HVHS

Finds a VirtualHost provisioned at a Host which is physically located in a Space.

R-HVSICSG

Finds a host connecting to a virtual subnet, plus the controlling service and connection to it from the authentication client on the host.

R-LSo

Finds a solo overlay Logical Subnet.

R-LSoLS

Finds a Logical Subnet that is an overlay on another Subnet.

R-SC4HVSHC

Finds a Service Channel crossing a Virtual Subnet between two Hosts, and the Host Channel representing a physical network path supporting this communication.

R-SC4HVSVC

Finds a Service Channel crossing a Virtual Subnet between two Hosts, and the Virtual Channel representing the physical connectivity requirement to support this communication.

R-SHVH

Finds a Virtual Host provisioned on a Simple Host.

R-THVH

Finds a Virtual Host provisioned on a Trivial Host.

R-VC2H

Finds a virtual channel between two physical hosts.

R-VCH2LS2PP

Finds a virtual subnet communication path between physical hosts, including the virtual channel, path generator and the start and end subnets.

R-VH

Finds a solo Virtual Host.

R-VH2H

Finds a VirtualHost above a Host provisioned at an SHost.

R-VHH2

Finds a VirtualHost provisioned at a Host for which it is also on the path to a physical host.

R-VHH3

Finds a virtual host provisioned by two hosts.

R-VHHH

Finds a VirtualHost provisioned at a Host and running on a PhysicalHost.

R-VHHsD

Finds a Virtual Host above another Host in a virtualisation stack where both store the same Data.

R-VHPH

Finds a virtual host provisioned by a physical host.

R-VHPhDHS

Finds a Virtual Host running a Process that handles Data, which is in a virtualisation stack above a second Host running a Process that Serves the Data, and where there is a Process serving the Data which may or may not be the same as either of the previous two.

R-VSHC

Finds a host channel supporting a virtual subnet, and the associated hosts.

R-VSPS

Finds a Virtual Subnet using a Physical Subnet to route at least one host-host connection.

R-VSPSH

Finds a Virtual Subnet provided by a Gateway Host using a Physical Subnet to route at least one host-host connection.

R-VSVC4H

Finds a virtual subnet and two connected hosts with distinct physical hosts between which virtual subnet messages should flow.

R-VSVCHC

Finds a Virtual Subnet via a Virtual Channel via a Host Channel.

R-VSVCHCLS

Finds a virtual subnet that uses a physical subnet.

MP-CCSCHC

Finds a Client Channel via a Service Channel that depends on connectivity represented by a Host Channel.

MP-CCSCVC

Finds a Client Channel via a Service Channel that requires connectivity represented by a Virtual Channel.

MP-CVHHDC

Finds a clusterable virtual Host provisioned on a physical host at a DataCentre.

MP-CVHHHoDC

Finds a cluster Virtual Host (role Host) provisioned at a Host (SHost), where the Virtual Host may optionally be managed by a Data Centre.

MP-DCCVH-LS

Finds a Data Centre with a Cluster on which is provisioned a Virtual Host that is not connected to any logical subnet.

MP-DCVHVS-H

Finds a Host that is physically in a DataCentre and connected to a virtual subnet that is not provided by any host.

MP-EH

Finds a solo elastically scalable host.

MP-GdHVS

Finds a gateway providing a virtual subnet to which a distinct host is connected, and optionally a process controlling access to the subnet.

MP-H2dPH2

Finds two hosts on a virtual subnet with distinct physical hosts, between which the virtualised communication must flow.

MP-HACVHmAC

Finds a host in a space provisioning a virtual host, and a location access context for the first host, plus all related access contexts for the virtual host.

MP-HCLSg

Finds a host channel that traverses a logical segment, along with the inbound and outbound interfaces to the segment host.

MP-HL

Finds a solo HostLAN

MP-HuiVH

Finds a Human interacting with a Virtual Host (which is not possible).

MP-HumHVH-Hu

Finds an unmanaged VirtualHost provisioned at a Host managed by a Human.

MP-HVH

Finds a VirtualHost and its host, and optionally its manager.

MP-HVH-a

Finds a VirtualHost provisioned at a Host where the pair lacks the above relationship indicating which is higher.

MP-HVHS

Finds a VirtualHost provisioned at a Host that is not a cluster and is located in a physical Space.

MP-HVSICSG

Finds a host connecting to a virtual subnet that it does not provide, plus the controlling service and connection to it from the authentication client on the host.

MP-ImHCf

Finds an interface between a host and a logical subnet where at least one host channel goes from that interface.

MP-ImHCt

Finds an interface between a host and a logical subnet where at least one host channel goes to that interface.

MP-INCmHCf

Finds an Interface, plus the associated host, subnet, and a host network access context where the interface is connected, plus all host channels from the interface.

MP-INCmHCt

Finds an Interface, plus the associated host, subnet, and a host network access context where the interface is connected, plus all host channels to the interface.

MP-LSmHC

Finds a Logical Subnet and all virtualised host channels via that subnet.

MP-LSoLS

Finds a Logical Subnet that is an overlay on another Subnet.

MP-mLSoLS

Finds a solo Logical Subnet which is an overlay of at least one other subnet.

MP-pLSoLS

Finds a solo Overlay Subnet lacking any other subnet on which it is an overlay.

MP-SC4HVSHC

Finds a Service Channel crossing a Virtual Subnet between two Hosts, and the Host Channel representing a physical network path supporting this communication.

MP-SC4HVSVC

Finds a Service Channel crossing a Virtual Subnet between two Hosts, and the Virtual Channel representing the physical connectivity requirement to support this communication.

MP-SgACmHC

Finds a logical segment between two subnets, plus the associated gateway host and its inbound and outbound interfaces, an access context in which the segment is active, and all assocated host channels.

MP-SgmHC

Finds a logical segment between two subnets, plus the associated gateway host and its inbound and outbound interfaces, and all assocated host channels.

MP-THVH

Finds a Virtual Host provisioned on a Trivial Host.

MP-VC2HmHC

Finds a virtual channel between two physical hosts, plus all the host channels associated with physical network paths between the hosts.

MP-VC2HmSC

Finds a virtual channel between two physical hosts, plus all the service channels associated with physical network paths between the hosts.

MP-VCH2LS2PP

Finds a virtual subnet communication path between physical hosts, including the virtual channel, path generator and the start and end subnets.

MP-VH2H-a

Finds three virtual hosts in a chain but lacking the above relationship indicating which of the first and last links is higher.

MP-VHH2

Finds a VirtualHost provisioned at a Host for which it is also on the path to a physical host.

MP-VHH3

Finds a virtual host provisioned by two distinct hosts.

MP-VHHHoDC

Finds a Virtual Host (role Host) provisioned at a Host (SHost), where the Virtual Host may optionally be provisioned by a Data Centre.

MP-VHHsD-HsS-S

Finds a Virtual Host above another Host in a virtualisation stack where both store the same Data, there is no lower level host in the stack that also stores the data, and the second host does not run a Process that serves the Data.

MP-VHPH

Finds a virtual host provisioned by a physical host.

MP-VHPhDHS-HsS-S

Finds a Virtual Host running a Process that handles Data but does not access it via a service, where its host is in a virtualisation stack above a second Host running a service for the Data, and there is no host between the two in the virtualisation stack running a Process that Serves the Data.

MP-VSHCmSC

Finds a host channel supporting a virtual subnet, and the associated hosts, along with all service channels that use the host channel.

MP-VSPSH

Finds a Virtual Subnet provided by a gateway host using a Physical Subnet to route at least one host-host connection, and optionally the process controlling the virtual subnet, and the manager of the gateway.

MP-VSPS-HP

Finds a Virtual Subnet using a Physical Subnet to route at least one host-host connection, where there is no gateway specified as the subnet provider, and no controlling Process.

MP-VSPSH-P

Finds a Virtual Subnet with no controlling Process, provided by a gateway host using a Physical Subnet to route at least one host-host connection, and optionally the manager of the Gateway.

MP-VSVC4H-PP

Finds a virtual subnet and two connected hosts with distinct physical hosts between which virtual subnet messages should flow, and yet there is no host channel, indicating no physical path between the physical hosts was found.

MP-VSVCHC

Finds a Virtual Subnet via a Virtual Channel via a Host Channel.

MP-VSVCHCLS

Finds a virtual subnet that uses a physical subnet.

(empty)

H.A.HVH.0

Loss of availability at SHost affects Host: if host SHost becomes unavailable, so will the host Host provisioned on SHost.

H.A.VHHHoDC.1

Restriction on availability of virtual host Host provisioned by SHost: whoever controls resource allocation for devices of class SHost can control availability for virtual hosts of class Host provisioned on SHost.

H.E.HuiVH.9

User Human cannot interact directly with virtual host Host: host Host is of a type that does not have a user interface, yet user Human is interactively using the host or a process running on it, which is not possible. Either change the type of Host, move the interactive user or process, or convert the process into a service accessed via an interactive client on a different host.

H.E.THVH.9

Hosting error for virtual host VirtualHost: device TrivialHost is a specialised host that cannot provision virtual host VirtualHost. Either remove VirtualHost, or move its provisionedBy relationship to a more general purpose host.

H.E.VHH2.9

Circular virtual hosting relationship at VirtualHost: virtual host VirtualHost is provisionedBy host Host, but that is also a virtual host that is (directly or indirectly) provisioned by VirtualHost. Review the provisionedBy relationships and remove the circular dependency. The simplest solution is to only provision virtual hosts either on physical hosts or at a data centre.

H.IS.HVH.8

Host Host in service: virtual host Host is not disabled, so is potentially subject to threats.

HC.A.ImHCf.0

Interrupted virtual subnet communications from Host via LogicalSubnet: if the connection between Host and LogicalSubnet is not available, then virtual network traffic sent from Host via LogicalSubnet will also be interrupted.

HC.A.ImHCt.0

Interrupted virtual subnet communications to Host via LogicalSubnet: if the connection between Host and LogicalSubnet is not available, then virtual network traffic sent to Host via LogicalSubnet will also be interrupted.

HC.A.LSmHC.0

Loss of availability in subnet LogicalSubnet affects virtual network comms: if subnet LogicalSubnet is not available, then this also applies to virtual network communications sent via this subnet.

HC.A.SgmHC.0

Connectivity issue at Gateway affects virtual network comms: if the route via Gateway between FromSubnet and ToSubnet is not available, virtual network comms via this route will be interrupted.

HC.C.ImHCf.3

Snooping virtual subnet communications by spoofing subnet LogicalSubnet to Host: if an attacker can spoof physical network LogicalSubnet to Host, they can intercept virtual communications sent via LogicalSubnet from Host.

HC.C.INCmHCf.3

Snooping virtual network comms from host Host via LogicalSubnet: if an attacker has control of physical host Host when it is connected to LogicalSubnet, they can snoop virtual communications sent from Host over LogicalSubnet.

HC.C.INCmHCt.3

Snooping virtual network comms to host Host via LogicalSubnet: if an attacker has control of physical host Host when it is connected to LogicalSubnet, they can snoop virtual communications sent to Host via LogicalSubnet.

HC.C.LSmHC.3

Virtual network communications snooped in physical subnet LogicalSubnet: if network traffic can be snooped in subnet LogicalSubnet, then this also applies to virtual network communications sent via this subnet.

HC.C.SgACmHC.3

Virtual network snooping at gateway Gateway betweenFromSubnet and ToSubnet: if an attacker has control of physical host Gateway in location Space where it is used to support communication between FromSubnet and ToSubnet, then the attacker can snoop on virtual subnet communications using that route through Gateway.

I.A.GdHVS.6

Device Host unable to connect to virtual subnet LogicalSubnet: if access to network subnet LogicalSubnet is restricted, device Host will be unable to connect if it does not have the necessary credentials.

I.Auth.HVSICSG.3

Spoofing virtual network LogicalSubnet to supplicant Host: at attacker who is able to impersonate the service Service mediating access to LogicalSubnet can induce a supplicant device Host to connect to the wrong virtual subnet.

LS.A.LSoLS.0

Loss of availability in subnet LogicalSubnet affects overlay OverlaySubnet: if subnet OverlaySubnet is an overlay on LogicalSubnet, then if LogicalSubnet is not available, neither is OverlaySubnet.

LS.C.LSoLS.3

Passive snooping in OverlaySubnet via LogicalSubnet: if subnet OverlaySubnet is an overlay on LogicalSubnet, then an attacker who can snoop messages sent over LogicalSubnet can also snoop messages in OverlaySubnet.

LS.E.pLSoLS.9

Lack of connectivity for overlay subnet OverlaySubnet: since OverlaySubnet is an IP overlay network, it should be overlaying at least one other subnet, but none was found.

LS.IS.mLSoLS.8

Subnet OverlaySubnet in service: if subnet OverlaySubnet is an overlay on one or more other subnets, and they are all in service, then so is OverlaySubnet.

LS.L.LSoLS.1

Access to LogicalSubnet allows access to OverlaySubnet: if subnet OverlaySubnet is an overlay on LogicalSubnet, then an attacker with access to LogicalSubnet can also access OverlaySubnet.

LS.L.VSPSH.1

Using admin rights at Gateway to enable access to LogicalSubnet from PhysicalSubnet: if someone has control of device Gateway providing virtual subnet LogicalSubnet, and access to the underlying physical subnet PhysicalSubnet, they can connect their own device to the virtual subnet.

LS.L.VSPS-HP.3

Access to virtual subnet LogicalSubnet via physical network PhysicalSubnet: if an attacker has access to physical subnet PhysicalSubnet, they connect to virtual subnet LogicalSubnet routed over PhysicalSubnet, unless prevented by security measures.

LS.L.VSPSH-P.3

LS.M.LSoLS.1

Loss of control in subnet LogicalSubnet affects overlay OverlaySubnet: if subnet OverlaySubnet is an overlay on LogicalSubnet, then if LogicalSubnet is controlled by malicious actors, so is OverlaySubnet.

SC.A.VC2HmSC.0

Loss of physical connectivity between LocalHost and RemoteHost affects client-service communications: if there is a loss of availability in physical network paths between LocalHost and RemoteHost supporting communications in subnet VirtualSubnet, then client-service communication via that virtual subnet will become unavailable.

SC.C.VSHCmSC.3

Snooping client-service comms subnet VirtualSubnet between LocalHost and RemoteHost: If an attacker can snoop at the physical layer between LocalHost and RemoteHost, they can intercept client-service comms in virtual subnet VirtualSubnet that go between those physical hosts.

VC.A.VC2HmHC.0

Communication failure in VirtualSubnet due to physical network failure between LocalHost and RemoteHost: the availability of communications in VirtualSubnet depends on that of physical network paths between LocalHost and RemoteHost.

VH.E.VHH3.9

Virtual host VirtualHost cannot have two hosts: hosts SHost and Host both have relationships indicating that VirtualHost is provisioned on them. A virtual host can only be provisioned on one underlying host at a time. Please break one of the relationships.

VH.M.HACVHmAC.1

Use of admin rights on Host when in Space to control VirtualHost: those with admin rights at device Host when in location Space can control virtual host VirtualHost provisioned on Host.

VS.E.VSVC4H-PP.9

Lack of physical connectivity for virtual subnet VirtualSubnet: hosts FromHost and ToHost on the same virtual network VirtualSubnet cannot communicate over VirtualSubnet because there is no physical network path between their physical hosts LocalHost and RemoteHost. Either add more network connections to support their communications, or make VirtualSubnet a physical subnet.

(empty)

CSG-VirtualSubnetEncryption

The virtual subnet VirtualSubnet uses encryption to prevent anyone reading communications via access at the physical layer.

(empty)

Role_HostChannel	A channel corresponding to a physical network path between two physical hosts, on which virtual network communication depends.
Role_HostLAN	A virtual subnet implemented witin a host to connect virtual hosts provisioned there.
Role_OverlaySubnet	A role filled by a subnet that is an overlay of some other subnet(s).
Role_ScalableHost	A scalable (virtual) host.
Role_VirtualChannel	A channel between two physical hosts connected by at least one physical network path, on which virtual network communication depends.
Role_VirtualHost	A virtual host.
Role_VirtualSubnet	A virtual subnet.

HostChannel	Represents a physical network path between physical hosts that is used to route traffic in a virtual subnet, underpinning a Virtual Channel.
HostLAN	A locally connected (virtual) network between a host device and virtual hosts provisioned on that device.
OverlaySubnet	A subnet implemented using iptables rules to provide an IP address overlay on an existing network. This can be used to route between virtual hosts using a network that connects their physical hosts, for example.
ScalableHost	Common parent class for any host that is automatically scalable, i.e. a virtual host where the number of instances can be increased to handle increased loads.
VCluster	A collection of identical virtual servers that can be managed as a cluster. A singleton VCluster in a system model represents multiple VM-class Hosts.
VirtualChannel	Link between two physical hosts that is needed to support communication between clients and services over virtual networks.
VirtualHost	A virtualised device provisioned by another Host, usually but not always at a data centre, using a subset of the underlying physical hardware capacity. Distinct from a PhysicalHost.
VirtualSubnet	A virtual subnet is any subnet comprising a slice (in any sense) of one or more physical subnets.
VM	A virtual host provisioned at a data centre, allocated a fraction of the underlying physical hardware capacity, and able to host arbitrary applications and data.
VPN	A virtual network created by means of protocol tunnelling over other networks. Packet level encryption is usually but not always used, so only physical routing headers (not VPN headers or message content) is accessible in the underlying network.
VRouter	A very simple virtual device used to transmit and receive data between different locally connected (possibly virtual) subnets.
VXLAN	A locally connected virtual network in which connections between hosts are transported over other networks. Includes software defined networks.

(empty)

Package Virtualisation

Root Patterns (40)

R-CCSCHC

R-CCSCVC

R-CVHHDC

R-CVHHH

R-DCCVH

R-DCVHC

R-DCVHVS

R-EH

R-GHVS

R-H2dPH2

R-HACVH

R-HCLSg

R-HL

R-HuiVH

R-HumHVH

R-HVH

R-HVHS

R-HVSICSG

R-LSo

R-LSoLS

R-SC4HVSHC

R-SC4HVSVC

R-SHVH

R-THVH

R-VC2H

R-VCH2LS2PP

R-VH

R-VH2H

R-VHH2

R-VHH3

R-VHHH

R-VHHsD

R-VHPH

R-VHPhDHS

R-VSHC

R-VSPS

R-VSPSH

R-VSVC4H

R-VSVCHC

R-VSVCHCLS

Matching Patterns (48)

MP-CCSCHC

MP-CCSCVC

MP-CVHHDC

MP-CVHHHoDC

MP-DCCVH-LS

MP-DCVHVS-H

MP-EH

MP-GdHVS

MP-H2dPH2

MP-HACVHmAC

MP-HCLSg

MP-HL

MP-HuiVH

MP-HumHVH-Hu

MP-HVH

MP-HVH-a

MP-HVHS

MP-HVSICSG

MP-ImHCf

MP-ImHCt

MP-INCmHCf

MP-INCmHCt

MP-LSmHC

MP-LSoLS

MP-mLSoLS

MP-pLSoLS

MP-SC4HVSHC

MP-SC4HVSVC

MP-SgACmHC

MP-SgmHC

MP-THVH

MP-VC2HmHC

MP-VC2HmSC

MP-VCH2LS2PP

MP-VH2H-a

MP-VHH2

MP-VHH3