STRIDE
A six-question framework (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) for threat modeling.
Learn it through a story
- Shift Left, or Get Left Behind (Cybersecurity for Juniors 3, Ch 2)
Related terms
- Social engineering Tricking a person directly, often using trust, politeness or fear, instead of tricking a computer.
- Specialisation Deep focus in one particular area, usually built on a broader foundation.
- Spoofing Faking a caller ID, sender name or address so it looks like it comes from somewhere trustworthy.
- Threat modeling Systematically asking what could go wrong with a system, and for whom, before or while it's built.
- Threat modelling Asking in advance who could misuse something and what the worst outcome could be.
- Three two one rule Keep three copies, on two kinds of storage, with one copy kept somewhere else.