STRIDE (security)

From Wikipedia, the free encyclopedia

STRIDE is a computer security threat modeling practice which attempts to categorize potential security threats by matching them to six categories.

The threat categories are:

• Spoofing of user identity
• Tampering
• Repudiation
• Information disclosure (privacy breach)
• Denial of Service (D.o.S.)
• Elevation of privilege

The STRIDE name comes from the initials of the six threat categories listed.

The methodology consists in decomposing a solution or system in reasonably sized modules and analyzing each module individually for the different threat types defined.

[edit] External links

• Uncover Security Design Flaws Using The STRIDE Approach