Files
TechradarDev/radar/2019-11-01/stride-threat-modeling.md
2021-07-02 11:58:55 +02:00

628 B

title, ring, quadrant
title ring quadrant
STRIDE Threat Modeling trial methods-and-patterns

STRIDE is a model of threat groups that helps to identify security threats to any application, component or infrastructure.

The acronym stands for:

  • Spoofing
  • Tampering
  • Repudiation
  • Information disclosure
  • Denial of service
  • Elevation of privilege

AOE is applying the threat model in collaborative sessions using the Elevation of Privilege Card Game which helps to spark imagination and makes threats more tangible.