STRIDE

From MgmtWiki
Jump to: navigation, search

Full Title or Meme

A classification of one Threat Model of vulnerabilities in distributed information processing systems.

Spoofing

Identity Spoofing is an attack directed at acquiring access by using either the user's credentials, Account Takeover or taking control of a transport session created by the user.

Tampering

Repudiation

Information Disclosure

Denial of Service (DoS)

Elevations of Privilege

References