Large Data Table with Excessive Number of Indices

Incomplete Base
Structure: Simple
Description

This weakness occurs when an application uses a database table with a very large number of rows and creates too many indexes on it, degrading overall system performance.

Extended Description

Excessive indexing on massive tables creates a significant maintenance overhead. Every insert, update, or delete operation must also update all related index structures, which slows down write operations and consumes extra storage and memory. While specific thresholds depend on your system, a common guideline is to consider tables with over 1,000,000 rows as 'large' and to be cautious when creating more than three indexes on such a table. If an attacker can trigger or exploit these slow operations, this performance degradation can become a security vulnerability. For example, it could lead to denial of service (DoS) by exhausting database resources or causing timeouts. Developers should regularly review index usage and design, ensuring indexes serve critical queries without unnecessarily burdening the database during data modification tasks.

Common Consequences 1
Scope: Other

Impact: Reduce Performance

References 1
Automated Source Code Performance Efficiency Measure (ASCPEM)
Object Management Group (OMG)
01-2016
ID: REF-959
Taxonomy Mapping
  • OMG ASCPEM