Solved

"Error Found: The attack surface analyzer test detected the following errors"

Posted on 2015-02-10
3
186 Views
Last Modified: 2015-02-16
I am trying to certify apps on a clean Windows 8.1 virtual machine.   It's pretty much an out of the box setup with a couple of apps on it and Windows App Certification Kit 3.4.  Well, I am FAILING all of my installers on the error below, but if you notice the error is actually error-less.   There are no errors produced.  

I've reinstalled WACK and submitted my installer projects to the developer of our installer software. They were able to successfully pass the step.   I simply have no idea how to deal with this at this point.

It's a standard EXE and MSI project.  No click to run.

Windows security best practices test
FAILED
Attack surface analyzer
•Error Found: The attack surface analyzer test detected the following errors:
•Impact if not fixed: During installation or runtime, the app changed an ACL on a registry key or directory. Changing the default Windows security protections can increase the vulnerability of customer's computer to malware.
•How to fix:  During installation and at runtime, your app must read and write data to the areas prescribed by the Windows App Certification without modifying an existing access control list. See link below for more information:
 Fixing Attack Surface Analyzer Errors
0
Comment
Question by:TechBento
  • 2
3 Comments
 
LVL 53

Expert Comment

by:McKnife
ID: 40604377
Hi.

"There are no errors produced" - what do you mean? The message claims, that your apps modifies default ACLs which it shouldn't. Or aint't that true?
0
 
LVL 2

Accepted Solution

by:
TechBento earned 0 total points
ID: 40604384
See the "...error:"
That's supposed to have file names/paths in it.   Yeah, produced nothing.

Good news is I got around the problem.  This was a clean VM from a MSDN ISO for 8.1 Pro "N".  I scuttled it and rebuilt it using a Windows 8.1 Pro - not the N version - and ... guess what?!  It passed.  I don't know what wacky thing WACK 3.4 was doing, but it seems that my prior Windows installation was too special for it.

So yeah, this is all done for.  I got my app certified and now onto other thing.s
0
 
LVL 2

Author Closing Comment

by:TechBento
ID: 40611889
I solved the issue in the last 24 hours.  The solution sucks: rebuild the VM.
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

OfficeMate Freezes on login or does not load after login credentials are input.
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now