<span id="7ztzv"></span>
<sub id="7ztzv"></sub>

<span id="7ztzv"></span><form id="7ztzv"></form>

<span id="7ztzv"></span>

        <address id="7ztzv"></address>

            WCF Misconfiguration: Throttling Not Enabled

            ABSTRACT

            不對系統資源的使用設定限制,可能會導致資源耗盡,并最終發生 Denial of Service。

            EXPLANATION

            Windows Communication Foundation (WCF) 可以抑制服務請求。允許過多客戶端請求可能會導致系統資源被全部占用。另一方面,只允許對服務進行少量請求可能會造成合法用戶無法使用該服務。應單獨調節和配置每一個服務,為其限定適當數量的資源。

            REFERENCES

            [1] Microsoft

            [2] Standards Mapping - OWASP Top 10 2004 - (OWASP 2004) A9 Application Denial of Service

            [3] Standards Mapping - Security Technical Implementation Guide Version 3 - (STIG 3) APP6080 CAT II

            [4] Standards Mapping - Security Technical Implementation Guide Version 3.4 - (STIG 3.4) APP6080 CAT II

            [5] Standards Mapping - Web Application Security Consortium 24 + 2 - (WASC 24 + 2) Brute Force, Insufficient Anti-automation

            [6] Standards Mapping - Common Weakness Enumeration - (CWE) CWE ID 400, CWE ID 770

            [7] Standards Mapping - Payment Card Industry Data Security Standard Version 1.1 - (PCI 1.1) Requirement 6.5.9

            [8] Standards Mapping - SANS Top 25 2010 - (SANS 2010) Risky Resource Management - CWE ID 770


            Copyright 2013 Fortify Software - All rights reserved.
            (Generated from version 2013.1.1.0008 of the Fortify Secure Coding Rulepacks)
            desc.config.dotnet.wcf_misconfiguration_throttling_not_enabled

            <span id="7ztzv"></span>
            <sub id="7ztzv"></sub>

            <span id="7ztzv"></span><form id="7ztzv"></form>

            <span id="7ztzv"></span>

                  <address id="7ztzv"></address>

                      亚洲欧美在线