What is threat modeling and the STRIDE categories?
Options
- Thinking what can go wrong; STRIDE lists six types (Correct option)
- A way to model the tables of a database schema
- A UI design technique for building the screens
- A performance test for the backend of the app
Answer
Thinking systematically about what can go wrong in a design; STRIDE = Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege
Why
Threat modeling is done during design: draw the system (data flows, trust boundaries), then ask for each part what could go wrong.
STRIDE gives a checklist:
- Spoofing (pretending to be someone), Tampering (changing data), Repudiation (denying an action), Information disclosure (leaks), Denial of service, Elevation of privilege.
Then decide mitigations. It is cheaper to fix a design flaw than a deployed system.
Remember
STRIDE: Spoofing, Tampering, Repudiation, Info disclosure, DoS, Elevation.