STRIDE model
Model for identifying computer security threats
From Wikipedia, the free encyclopedia
STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) is a threat model for identifying computer security threats.[1]
Developed by Praerit Garg and Loren Kohnfelder at Microsoft,[2] it provides a mnemonic for security threats in six categories.[3] Each STRIDE category corresponds to a core principle of information security: Authenticity, Integrity, Non-repudiability, Confidentiality, Availability and Authorization.
See also
- Attack tree – another approach to security threat modeling, stemming from dependency analysis
- DREAD – a classification system for security threats
- OWASP – an organization devoted to improving web application security through education
- CIA also known as AIC – another mnemonic for a security model to build security in IT systems
