Visualising virtual infrastructure

The cloud use case in TREsPASS can serve as an example exhibiting many challenges: the cloud is situated in multiple spheres of interest: a physical setting with rooms, doors and windows where e.g., physical infrastructure pieces of a cloud environment are situated and where the different actors have access and can move,software-defined virtual parts, like virtual machines (VMs), virtual network and storage,situated in an abstract and completely separate space, or the social space where a distance between actors defines weak or strong relation-ships. At the same time, the physical elements (e.g., servers, network) can range in the tens of thousands, the virtual, software-defined components (e.g., virtual machines) can range in hundreds of thousands. In addition, there is typically a very large number of users of the cloud infrastructure and rather few, but very powerful, administrators. All these elements will interact (cooperating or interacting maliciously) leading to a complex behaviour over time, which leads in effect to a Complex Adaptive System. 

Here under are some visualisation examples showing how changes on servers, including VMs can be visualised so that a general vulnerability-score can be read from it.

connections-01
Example of a hierarchical structure, where each virtual asset (file, program, VM) is assigned a temporal vulnerability-score.
connections-02
Nested hierarchical structure of virtual assets, dotted lines are (temporarily) not used assets.
connections-04
Virtual assets ordered on vulnerability, in most cases the most logical manner to display the information.

connections_

Two simultaneous views on files on a Virtual Machine (VM). Brighter green blocks are more vulnerable.
Two simultaneous views on files on a Virtual Machine (VM). Brighter green blocks are more vulnerable.
screen-shot-2015-04-08-at-17-15-46
Expanded view of one of the VMs folders.