Remember STRIDE
Full name: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege
Memory aid: Walk through each STRIDE category while reviewing a data flow.
STRIDE categories guide analysis rather than proving that every threat has been found.
Study area: MIS, risk & continuity · Batch 8
Relevant study for: CompTIA Security+ SY0-701 · ISC2 CISSP 2024 outline · CompTIA SecurityX · ISC2 CC
Practice with exam flashcards →MIS, Risk & Continuity / Knowledge library
STRIDE — Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege
Categorizes threats using six classes of undesirable behavior.
Why learn STRIDE — Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege?
Categorizes threats using six classes of undesirable behavior.
Where it came from
STRIDE categories guide analysis rather than proving that every threat has been found.
- Memory aid (a learning cue, not the expansion): Walk through each STRIDE category while reviewing a data flow.
Build your understanding
Work through these exercises in order. Try the task before opening a reference.
- Without looking, expand STRIDE: Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
- Recall this memory aid: Walk through each STRIDE category while reviewing a data flow.
- Explain the practical use: Categorizes threats using six classes of undesirable behavior.
- Explain this distinction: STRIDE categories guide analysis rather than proving that every threat has been found.
- Identify STRIDE in a device specification, architecture diagram, or system inventory.
Documentation and sources
- OWASP threat modeling guidance (cheatsheetseries.owasp.org)