Abstract: Described herein are systems, methods, and software to identify propagation risk of threats in a computing environment. In one implementation, a management service may identify a connection tree for a computing environment based on forwarding rules for virtual nodes in the computing environment. The management service may further, for each connection in the connection tree, determine a threat value based at least on a protocol associated with the connection. The management service may also identify a threat to a virtual node of the virtual nodes and generate a threat propagation summary for the threat based on the one or more minimum or maximum spanning trees.

Abstract: The current document is directed to methods and subsystems that validate migration of a virtualized subsystem from a first implementation and/or version to a second implementation and/or version carried out by a semi-automated or automated migration process. Virtualized-subsystem migrations allow a distributed computer system to access new and improved facilities and capabilities provided by a new virtualized-subsystem implementation and/or version. However, there are risks associated with semi-automated and automated migration processes. Independent validation of a migration by the currently disclosed methods and systems ameliorates these risks.

Abstract: Described herein are systems, methods, and software to identify propagation risk of threats in a computing environment. In one implementation, a management service may identify a connection tree for a computing environment based on forwarding rules for virtual nodes in the computing environment. The management service may further, for each connection in the connection tree, determine a threat value based at least on a protocol associated with the connection. The management service may also identify a threat to a virtual node of the virtual nodes and generate a threat propagation summary for the threat based on the one or more minimum or maximum spanning trees.