Enterprise Library Test Guide - Willy .Net

Testing for Security Best Practices 135
Threat 4
Threat
description
Countermeasures
STRIDE
classification
Risk
Mitigation
Investigative
notes
Attackers can flood the database log with false messages.
The Logging Application Block exposes interfaces that allow an application
to use the Data Access Application Block to log messages to a database.
An attacker can use these interfaces to flood the database with false messages.
This can eventually cause a denial of service. In addition, log messages
in the database may contain sensitive information.
The Data Access Application Block requires explicit Code Access Security
permissions to access SQL Server or an Oracle database. No such permissions
are necessary to access a generic database. The GenericDatabase
class’s access methods have overloads that can request custom permissions
that derive from the .NET Framework DBDataPermission class. These
permissions ensure that the application has the proper level of security to
access the database.
Tampering, Denial of Services, Elevation of Privileges
High
Yes
None
Table 14 lists the DREAD rating for threat 4.
Table 14: Threat 4 DREAD Rating
D R E A D Total Rating
3 3 2 3 3 14 High
Table 15 lists details about threat 5.
Table 15: Logging Application Block Threat 5
Threat 5
Name
Entry points
Threat
description
Countermeasures
Attackers can flood the flat file log with false messages.
Flooding the flat file log
Public classes and static methods
The Logging Application Block exposes interfaces that allow you to log messages
to a flat file. An attacker can use these interfaces to flood the flat file
with false messages. This can constitute a denial of service attack. In addition,
log messages in the flat file may contain sensitive information.
Check the hard disk space to see if it has reached its threshold limit, which
controls how many messages can be in the file. If the flat file has reached
its limit, generate an exception. The application should appropriately handle
this exception. Also, the application should include code that uses an
instance of the FileIOPermission class. Finally, the administrator should assign
the appropriate ACLs to the event log for read/ write operations.
continued