Enterprise Library Test Guide - Willy .Net

134
Enterprise Library Test Guide
Table 10 lists the DREAD rating for threat 2.
Table 10: Threat 2 DREAD Rating
D R E A D Total Rating
3 3 2 3 3 14 High
Table 11 lists details about threat 3.
Table 11: Logging Application Block Threat 3
Threat 3
Name
Entry points
Threat description
Countermeasures
STRIDE
classification
Risk
Mitigation
Investigative
notes
Attackers can flood the event log with false error messages.
Flooding the event log
Public classes and static methods
The Logging Application Block exposes interfaces that allow you to log
messages to the event log. An attacker can use these interfaces to flood
the event log with false messages. This can constitute a denial of service
attack. In addition, the event log may contain sensitive information.
Check the event log to see if it has reached its threshold limit, which controls
how many messages can be in the log. If the event log has reached
its limit, generate an exception. The application should appropriately handle
this exception. Also, the application should include code that uses an
instance of the EventLogPermission class. Finally, the administrator should
assign the appropriate ACLs to the event log for read/ write operations.
Tampering, Information Disclosure, Denial of Services, Elevation of
Privileges
High
No
None
Table 12 lists the DREAD rating for threat 3.
Table 12: Threat 3 DREAD Rating
D R E A D Total Rating
3 3 2 3 3 14 High
Table 13 lists details about threat 4.
Table 13: Logging Application Block Threat 4
Threat 4
Name
Entry points
Attackers can flood the database log with false messages.
Flooding the database
Public classes and static methods