Enterprise Library Test Guide - Willy .Net

138
Enterprise Library Test Guide
Table 22 lists the DREAD rating for threat 8.
Table 22: Threat 8 DREAD Rating
D R E A D Total Rating
3 3 2 3 3 14 High
Table 23 lists details about threat 9.
Table 23: Logging Application Block Threat 9
Threat 9
Name
Entry points
Threat
description
Countermeasures
STRIDE
classification
Risk
Mitigation
Attackers can flood WMI event instrumentation with false events.
Flooding WMI events
Public classes and static methods
The Logging Application Block exposes interfaces that allow you to raise
WMI events. An attacker can use these interfaces to raise false instrumentation
events. This can constitute a denial of service attack.
Validate the input.
Denial of Services, Elevation of Privileges
High
No