thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

Spoofing

Pretending to be another user, system or component in order to gain its access or trust.

Definition

In STRIDE, spoofing threats violate authentication. Examples include stolen session tokens, forged email senders, fake API clients and impersonated services. Mitigations include strong authentication, mutual TLS, signed tokens and anti-phishing controls.

Example

An attacker reuses a stolen API key to call the payments service as a trusted client.

Exam tip

Spoofing is countered by authentication; tampering by integrity controls.

Related terms