Enterprise Library Test Guide - Willy .Net

Testing for Security Best Practices 125
Table 1: Logging Application Block Assets
Assets
Assemblies
Resource files
Configuration files
Configuration value objects
Database
Database connection
string
File system log files
SMTP server
Message queues and
distributor service
Event log
Vulnerabilities
You should protect the Logging Application Block assemblies from
malicious users who could tamper with them, replace them with
other assemblies, or override them with other assemblies.
Resource files contain static error messages. You should protect
them from unauthorized read/write operations.
The configuration files contain separate sections for each application
block and for the instrumentation. This is sensitive data that
you should protect from unauthorized read/write operations.
The configuration value objects hold configuration information
in memory. Configuration data is sensitive information that you
should protect from unauthorized read/write operations.
The Logging Application Block exposes interfaces that allow you
to use the Data Access Application Block to log messages to a
database. This information may be sensitive and unauthorized
users should not be allowed to see it. This may also true of other
information in the database. Also, you should protect the database
from unauthorized read/write operations.
The Logging Application Block uses the Data Access Application
Block to log information to a database. The Data Access Application
Block uses a connection string that is specified in the configuration
file to access the database. This file stores the connection
string as plaintext. The connection string can include a server
name, a database name, a user ID, and a password. You should
protect this information from unauthorized read/write operations.
The Logging Application Block exposes interfaces that allow you to
log messages to a log file. These messages may contain sensitive
information. You should use access control lists (ACL) or encryption
to protect the log file from unauthorized read/write operations.
The Logging Application Block exposes interfaces that allow you to
use an SMTP server to send e-mail. Malicious users can use the
server to send unsolicited e-mail messages. You should protect the
SMTP server from unauthorized access.
The Logging Application Block exposes interfaces that allow you to
place log messages in a Message Queuing queue and distribute
them to trace listeners. These messages may contain sensitive
information. You should protect the queue and the messages from
unauthorized read/write operations.
The Logging Application Block exposes interfaces that allow you
to log messages in the event log. These messages may contain
sensitive information. You should protect them from unauthorized
read/write operations.
continued