STRIDE (security)

STRIDE is a system developed by Microsoft for classifying computer security threats. It provides a mnemonic for security threats in six categories.

The threat categories are:

• Spoofing of user identity
• Tampering
• Repudiation
• Information disclosure (privacy breach or Data leak)
• Denial of Service (D.o.S.)
• Elevation of privilege

The STRIDE name comes from the initials of the six threat categories listed. It was initially proposed for threat modeling, but is now used more broadly.

External links

• Uncover Security Design Flaws Using The STRIDE Approach