STRIDE Framework
A framework used to categorize and address threat types to a system or application.
Threat Categories
- Spoofing: Authenticate requests and users accessing the system. Prevents impersonation of a user or service.
- Tampering: Ensure data integrity by implementing anti-tampering measures in transit or at rest.
- Repudiation: Log activities to provide accountability and traceability, preventing users from denying actions.
- Information Disclosure: Protect sensitive information and limit data exposure via access controls.
- Denial of Service (DoS): Prevent abuse of system resources that leads to service unavailability (e.g., rate limiting).
- Elevation of Privilege: Restrict administrative access to prevent unauthorized privilege escalation.
Threat Modelling Process
- Identification: Identify threats and potential vulnerabilities.
- Preparation: Establish resources and gather intelligence.
- Mitigations: Develop strategies to address identified threats.
- Review: Evaluate and refine the threat model.
Key Components of a Threat Model
- Threat intelligence
- Asset identification
- Mitigation capabilities
- Risk assessment