thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

STRIDE per Element

A threat modeling technique that applies only the STRIDE categories relevant to each DFD element type.

Definition

External entities are subject to spoofing and repudiation; processes to all six categories; data stores to tampering, repudiation (if logs), information disclosure and denial of service; data flows to tampering, information disclosure and denial of service. This narrows analysis and makes it repeatable.

Example

For a database data store, the team evaluates tampering, information disclosure and denial-of-service threats.

Exam tip

Processes are the only DFD element susceptible to all six STRIDE categories.

Related terms