Audit

Opis

Weaknesses in this category are related to the design and architecture of audit-based components of the system. Frequently these deal with logging user activities in order to identify attackers and modifications to the system. The weaknesses in this category could lead to a degradation of the quality of the audit capability if they are not addressed when designing or implementing a secure architecture.

Wpisy w tej grupie

• CWE-117 Improper Output Neutralization for Logs
• CWE-223 Omission of Security-relevant Information
• CWE-224 Obscured Security-relevant Information by Alternate Name
• CWE-532 Insertion of Sensitive Information into Log File
• CWE-778 Insufficient Logging
• CWE-779 Logging of Excessive Data

Źródła