Enterprise Library Test Guide - Willy .Net

Testing for Security Best Practices 137
Table 19 lists details about threat 7.
Table 19: Logging Application Block Threat 7
Threat 7
Name
Entry points
Threat
description
Countermeasures
STRIDE
classification
Risk
Mitigation
Investigative
notes
Attackers can use some of the application block interfaces to send unsolicited
e-mail messages.
Unsolicited e-mail
Public classes and static methods
The Logging Application Block exposes interfaces that allow you to e-mail log
messages. An attacker can use these interfaces to send unsolicited e-mail
messages.
The administrator should assign the appropriate ACLs to the SMTP server.
Information Disclosure, Denial of Services
High
No
None
Table 20 lists the DREAD rating for threat 7.
Table 20: Threat 7 DREAD Rating
D R E A D Total Rating
3 3 2 3 3 14 High
Table 21 lists details about threat 8.
Table 21: Logging Application Block Threat 8
Threat 8
Name
Entry points
Threat
description
Countermeasures
STRIDE
classification
Risk
Mitigation
Investigative
notes
Attackers can flood the message queues with false messages.
Flooding of message queues and distributor service
Public classes and static methods
The Logging Application Block exposes interfaces that allow you to send
messages to the message queues so that the log messages can be asynchronously
processed. An attacker can use these interfaces to send false
messages to the message queue. The distributor service then processes
these messages. These false messages can constitute a denial of service
attack.
In addition, messages in a message queue may contain sensitive information.
The application should perform authentication and authorization before
granting a user access to the message queue.
Tampering, Information Disclosure, Denial of Services, Elevation of
Privileges
High
No
None