System or application information that can be used to more effectively attack the applicationĮnsure that Audit and Log Files have Restricted Access TitleĬheck to ensure access rights to log files are appropriately set.Private keys or other data that could be used to decrypt encrypted information.Credit card numbers or other financial information.Social Security number or other identifying information.Check for intentional logging as well as side effects caused by design issues. Log separation basically means that you have to store your log files on a different partition as where your OS/application is running on in order to avert a Denial of service attack or the downgrading of your application its performanceĮnsure that the application does not log sensitive user data TitleĬheck that you do not log any sensitive data that a user submits to your site. Servers which run large applications often log every request: in the face of bulky logs, log rotation is a way to limit the total size of the logs while still allowing analysis of recent events. Log rotation is an automated process used in system administration in which dated log files are archived. Implement centralized loggingĮnsure that log rotation and separation are in place Title Identify all important events and log those events.

Identify entities in your solution containing sensitive data and implement change auditing on those entities and fieldsĮnsure that auditing and logging is enforced on the application TitleĮnable auditing and logging on all components. Identify sensitive entities in your solution and implement change auditing Title Ensure that appropriate auditing and logging is enforced on Cloud Gateway.Ensure that appropriate auditing and logging is enforced on Field Gateway.

Ensure that auditing and logging is enforced on Web API.Implement sufficient Audit Failure Handling.Use Azure Storage Analytics to audit access of Azure Storage.Ensure that login auditing is enabled on SQL Server.Enable diagnostics logging for web apps in Azure App Service.Ensure that the system has inbuilt defenses against misuse.Ensure that User Management Events are Logged.Ensure that Audit and Log Files have Restricted Access.

Ensure that the application does not log sensitive user data.

Ensure that log rotation and separation are in place.

Ensure that auditing and logging is enforced on the application.

Identify sensitive entities in your solution and implement change auditing.

Sdl threat modeling tool netapps