Improving Web Application Security: Threats and - CGISecurity

Chapter 13: Building Secure Remoted Components 349Threats and CountermeasuresTo build secure solutions that use remoting technology, you need to know theassociated threats. The top threats to components that use remoting are:● Unauthorized access● Network eavesdropping● Parameter manipulation● SerializationFigure 13.2 shows these threats.UnauthorizedAccessParameterManipulationClientRemotingSerializationNetworkEavesdroppingFigure 13.2Main remoting threatUnauthorized AccessRemote components that provide sensitive or restricted information shouldauthenticate and authorize their callers to prevent unauthorized access. Weakauthentication and authorization can be exploited to gain unauthorized access tosensitive information and operations.VulnerabilitiesVulnerabilities that make your remoting solution susceptible to unauthorized accessinclude:● No application level authentication because a custom Windows service hostis used● No IPSec policies to restrict which computers can communicate with themiddle-tier application server that hosts the remote components● No role-based authorization● No file authorization to restrict access to remoting endpoints● Trusting IPrincipal objects passed from the client