Files
TechRadarAJR/radar/2019-11-01/stride-threat-modeling.md
2019-11-06 08:24:56 +01:00

629 B

title, ring, quadrant
title ring quadrant
STRIDE Threat Modeling trial methods-and-patterns

STRIDE is a model of threat groups that helps to identify security threats to any application, component or infrastructure.

The acronym stands for:

  • Spoofing
  • Tampering
  • Repudiation
  • Information disclosure
  • Denial of service
  • Elevation of privilege

AOE is applying the threat model in collaborative sessions using the Elevation of Privilege Card Game which helps to spark imagination and makes threats more tangible.