Enterprise Library Test Guide - Willy .Net

Testing for Security Best Practices 129
Identify the Relevant Classes
Identify the relevant classes and the ways you expect them to be used. These are
classes that, if misused, can affect the security of the application block. Table 3 lists
the Logging Application Block classes.
Table 3: Logging Application Block Classes
No. Scenario
1 The Logger class can access the default configuration file.
2 The EnterpriseLibraryFactory class can access custom configuration sources and the
default configuration source.
3 The CustomTraceListener class is the base class for custom trace listeners.
4 The EmailTraceListener class creates e-mail messages from log messages and sends
them.
5 The FormattedEventLogTraceListener class logs information to the event log.
6 The FormattedTextWriterTraceListener class uses streams to log messages.
7 The FlatFileTraceListener class logs messages to flat files.
8 The WMITraceListener class raises instrumentation events.
9 The MsmqTraceListener class sends log messages to a message queue.
10 The FormatterDatabaseTraceListener class logs information to a database.
11 The LoggingInstrumentationProvider class implements the instrumentation. The LoggingInstrumentationListener
class receives performance counter data.
12 The CategoryFilter class filters log messages based on their categories. Users specify
these categories when they configure the application block.
13 The LogEnabledFilter class enables and disables logging.
14 The PriorityFilter class filters log messages based on their priorities.
15 The ILogFilter interface is the basis for custom log filters that filter log messages according
to their attributes.
16 The BinaryLogFormatter class serializes log messages in binary format.
17 The TextFormatter class formats log messages according to a specified template.
18 The ILogFormatter interface is the basis for custom log formatters.
19 The ComPlusInformationProvider class gathers information about COM objects that can be
included in a log message.
20 The DebugInformationProvider class gathers diagnostic debugging information, such as
stack traces that can be included in a log message.
21 The ManagedSecurityContextInformationProvider class gathers diagnostic information
about the managed code security context that can be included in a log message.
22 The UnmanagedSecurityContextInformationProvider class gathers diagnostic information
about the unmanaged code security context.
23 The IExtraInformationProvider interface is the basis for custom configuration classes,
such as dictionaries, that gather diagnostic information.
24 The MsmqListener class configures a message queue.
25 The MsmqLogDistributor class transfers the message queue SOAP messages to trace
sources that are specified in the configuration file.
continued