thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Foundational

STRIDE

Microsoft's threat classification mnemonic: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service and Elevation of privilege.

Definition

STRIDE maps each threat category to the security property it violates: spoofing to authentication, tampering to integrity, repudiation to non-repudiation, information disclosure to confidentiality, denial of service to availability and elevation of privilege to authorization. It is applied to DFD elements to systematically find threats during design.

Example

Forging a session cookie to act as another user is a Spoofing threat; altering a price in a request is Tampering.

Exam tip

Be ready to map each STRIDE letter to its violated property; repudiation maps to non-repudiation (logging/signatures).

Don't confuse it with

Related terms