name: VM
full_form: Virtual Machine
context: administration domains (e.g. LI sub-functions are managed via different interfaces and have separated administration). In a virtual environment while the hypervisor plays a role in preventing one VM from accessing the memory of another (except through declared VM shared memory locations), the hypervisor is also able to inspect any memory which is directly under hypervisor control. Such access to memory or other VM resources cannot be detected by VM or 3GPP security mechanisms. Encrypting memory provides some resistance but if the keys used to encrypt the memory are also under hypervisor control (including hypervisor resource controlled Hardware Based Root of Trust (HBRT)) then this does not prevent introspection. In addition to reading memory, the hypervisor is also in many cases able to write directly to memory, bypassing normal memory access controls and security within the VNF VM. This allows an attacker with access to the hypervisor to change data within a 3GPP function at
description: A Virtual Machine (VM) is a software emulation of a physical computer or hardware platform, allowing multiple operating systems to run on a single physical machine. In the context of 3GPP specifications, VMs are relevant in discussions around virtualized network functions and security.
explanation: The provided text describes a VM as a software emulation of a physical computer, highlighting its role in running multiple operating systems on a single hardware platform. This definition aligns with the characteristics of a device, which is a physical or virtual entity capable of performing specific functions.
section_title: 5.8.1	Key issue detail
biotag_Context: O,O,O,B-Parameter,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,B-Network Function,O,B-Organization,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Device,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Network Function,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Organization,O,O
biotag_Description: O,B-Device,I-Device,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,O,B-Organization,O,O,O,O,O,O,O,O,O,O,O,O