thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Trike

A risk-based threat modeling methodology that starts from a requirements model of actors, assets and allowed actions.

Definition

Trike builds a requirements model defining which actors may create, read, update or delete each asset, then derives threats as denial of allowed actions or elevation to disallowed actions. Risk values are assigned to each. It is less common in practice but appears in exam lists of methodologies.

Example

Trike flags 'anonymous user can update order' as a disallowed action that becomes a threat.

Exam tip

Trike is defined by its CRUD-based requirements model.

Related terms